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(57)Abstract: 

PROBLEM TO BE SOLVED: To allow a framework 
to certainly charge necessary constraint on a 
service to be offered to an application by the 
dynamic construction of required mounting. 
SOLUTION: An application issues a request for 
mounting for a specific service to a framework. The 
framework receives this request, and when any 
constraint is present corresponding to this request, 
the framework decides which constraint should be 
charged on the requested mounting. This constraint 
is decided by judging whether or not the application 
issuing the request for mounting is given 
authorization, and when this authorization is 
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present, this authorization is processed for introducing the set of constraints to be charged 
on the mounting. This authorization is processed so that the introduced set of constraints 
can be the minimum constraint level. 



CLAIMS 



[Claim(s)] 

[Claim 1]. It can set to a system as which mounting of specific service is required by 
application. Are the method of determining restrictions imposed on said mounting, and it is 
judged whether there is any permission given to said application which requires said 
mounting, A method provided with processing said permission in order to lead a set of 
restrictions imposed on said mounting according to judgment that there is at least one 
permission given to said application. 

[Claim 2] A method according to claim 1 of being what is processed so that said permission 
may serve as a restrictions degree with the smallest set of said restrictions. 
[Claim 3] A method according to claim 1 further provided with accessing a set of initial 
restriction according to judgment that there is no permission given to said application, and 
drawing said restrictions based on said initial restriction. 

[Claim 4]said initial restriction two or more law - a method according to claim 3 of being 
what is drawn by merging a policy and extracting restrictions restrictions from there. 
[Claim 5]A method according to claim 1 provided with preparing an index of said processing 
of said permission being what does not have restriction of said mounting according to 
judgment that said permission judges whether it is the permission in which all are included, 
arid said permission is the permission which includes all. 

[Claim 6]A method according to claim 1 for which it had leading a set of said restrictions 
based on said permission according to judgment that said permission judges whether said 
processing of said permission needs to mount an exemption mechanism and said 
permission does not need to mount an exemption mechanism. 

[Claim 7] A method according to claim 6 provided with leading a set of said restrictions 
based on said parameter according to judgment that drawing said restrictions judged 
whether said permission would have specified a set of a parameter and said permission has 
specified a set of a parameter. 

[Claim 8] A method according to claim 6 provided with preparing an index of being a thing 
without restriction of said mounting according to judgment that drawing said restrictions 
judges whether said permission has specified a set of a parameter and said permission has 
not specified a set of a parameter. 
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[Claim 9] It is judged whether it needs to mount an exemption mechanism in which said 
permission is [ said processing of said permission ] specific, A method according to claim 1 
provided with adjusting said permission and said exemption restrictions in order to access 
a set of exemption restrictions and to draw said restrictions according to judgment that it 
needs to mount an exemption mechanism in which said permission is specific. 
[Claim 10] Said adjustment with said permission and said exemption restrictions judges 
whether said exemption restrictions permit that said specific exemption mechanism is 
mounted to said mounting, A method according to claim 9 by which said exemption 
restrictions were provided with drawing said restrictions based on said exemption 
restrictions according to judgment that it permits that said specific exemption mechanism 
is mounted to said mounting. 

[Claim ll]Said adjustment with said permission and said exemption restrictions judges 
whether said exemption restrictions permit that said specific exemption mechanism is 
mounted to said mounting, A method according to claim 9 provided with said exemption 
restrictions accessing a set of initial restriction according to judgment that it does not 
permit that said specific exemption mechanism is mounted to said mounting, and drawing 
said restrictions based on said initial restriction. 

[Claim 12]said exemption restrictions - two or more law -- a method according to claim 9 of 
being what is drawn by merging a policy and extracting restrictions restrictions from there. 
[Claim 13] A method according to claim 1 provided with scrutinizing a Call Stack, in order 
to judge any application with which said judgment whether there is any permission given 
to said application required said mounting is. 

[Claim 14] A method according to claim 13 further provided with said judgment whether 
there is any permission given to said application attesting said application. 
[Claim 15] A device which determines restrictions in a system characterized by comprising 
the following as which mounting of specific service is required by application imposed on 
said mounting. 

A mechanism in which it is judged whether there is any permission given to said 
application which requires said mounting. 

A mechanism which processes said permission in order to lead a set of restrictions imposed 
on said mounting according to judgment that there is at least one permission given to said 
application. 

[Claim 16]The device according to claim 15 which is what is processed so that said 
permission may serve as a restrictions degree with the smallest set of said restrictions. 
[Claim 17] The device according to claim 15 further provided with a mechanism which 
accesses a set of initial restriction, and a mechanism to carry out in which said restrictions 
are drawn based on said initial restriction, according to judgment that there is no 



permission given to said application. 

[Claim 18]said initial restriction -- two or more law - the device according to claim 17 which 
is what is drawn by merging a policy and extracting restrictions restrictions from there. 
[Claim 19]The device comprising according to claim 15: 

A mechanism in which said mechanism which processes said permission judges whether it 
is the permission in which said permission includes all. 

A mechanism which prepares an index of being a thing without restriction of said mounting 
according to judgment that said permission is the permission which includes all. 

[Claim 20]The device comprising according to claim 15: 

A mechanism which said mechanism which processes said permission judges for whether 
said permission needs to mount an exemption mechanism. 

A mechanism in which a set of said restrictions is led based on said permission according to 
judgment that said permission does not need to mount an exemption mechanism. 

[Claim 21]The device comprising according to claim 20: 

A mechanism in which said mechanism in which said restrictions are drawn judges 
whether said permission has specified a set of a parameter. 

A mechanism in which a set of said restrictions is led based on said parameter according to 
judgment that said permission has specified a set of a parameter. 

[Claim 22]The device comprising according to claim 20: 

A mechanism in which said mechanism in which said restrictions are drawn judges 
whether said permission has specified a set of a parameter. 

A mechanism which prepares an index of being a thing without restriction of said mounting 
according to judgment that said permission has not specified a set of a parameter. 

[Claim 23]The device comprising according to claim 15: 

A mechanism in which it is judged whether it needs to mount an exemption mechanism in 
which said permission is [ said mechanism which processes said permission ] specific. 
A mechanism which accesses a set of exemption restrictions according to judgment that it 
needs to mount an exemption mechanism in which said permission is specific, and a 
mechanism in which said permission and said exemption restrictions are adjusted in order 
to draw said restrictions. 

[Claim 24]The device comprising according to claim 23: 

A mechanism in which said mechanism in which said permission and said exemption 
restrictions are adjusted judges whether said exemption restrictions permit that said 



4 



specific exemption mechanism is mounted to said mounting. 

A mechanism in which said exemption restrictions draw said restrictions based on said 
exemption restrictions according to judgment that it permits that said specific exemption 
mechanism is mounted to said mounting. 
[Claim 25]The device comprising according to claim 23: 

A mechanism in which said mechanism in which said permission and said exemption 
restrictions are adjusted judges whether said exemption restrictions permit that said 
specific exemption mechanism is mounted to said mounting. 

A mechanism in which said exemption restrictions access a set of initial restriction 
according to judgment that it does not permit that said specific exemption mechanism is 
mounted to said mounting, and a mechanism in which said restrictions are drawn based on 
said initial restriction. 

[Claim 26]said exemption restrictions two or more law -- the device according to claim 23 
which is what is drawn by merging a policy and extracting restrictions restrictions from 
there. 

[Claim 27]The device according to claim 15 with which said mechanism in which it was 
judged whether there is any permission given to said application was provided with a 
mechanism in which a Call Stack is scrutinized in order to judge any application which 
required said mounting is. 

[Claim 28]The device according to claim 27 with which said mechanism in which it was 
judged. whether there is any permission given to said application was further provided with 
a mechanism which attests said application. 

[Claim 29]When it is the medium characterized by comprising the following which stored a 
command and in which computer reading is possible and said command is executed by 1 or 
two or more processors, this what is operated so that restrictions which impose 1 or two 
or more processors on mounting of specific service of which it was required by application 
may be determined 

A command whose 1 or two or more processors are operated so that it may judge whether 
there is any permission given to said application with which a medium in which said 
computer reading is possible requires said mounting. 

A command which operates 1 or two or more processors so that said permission may be 
processed in order to lead a set of restrictions imposed on said mounting according to 
judgment that there is at least one permission given to said application. 
[Claim 30]A medium which is what is processed so that said permission may serve as a 
restrictions degree with the smallest set of said restrictions and in which the computer 
reading according to claim 29 is possible. 

[Claim 31] According to judgment that there is no permission given to said application, so 
that a set of initial restriction may be accessed, A medium which was further provided with 
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a command which operates 1 or two or more processors, and a command to which said 
restrictions are led based on said initial restriction, and which operates 1 or two or more 
processors so that it may carry out and in which the computer reading according to claim 29 
is possible. 

[Claim 32]said initial restriction - two or more law - a medium which is what is drawn by 
merging a policy and extracting restrictions restrictions from there and in which the 
computer reading according to claim 31 is possible. 

[Claim 3 3] A medium in which the computer reading according to claim 29 is possible, 
comprising: 

A command said command which operates 1 or two or more processors operates 

[ command ] 1 or two or more processors so that it may judge whether it is the permission in 

which said permission includes all so that said permission may be processed. 

A command which operates 1 or two or more processors so that an index of being a thing 

without restriction of said mounting may be prepared according to judgment that said 

permission is the permission which includes all. 

[Claim 34]A medium in which the computer reading according to claim 29 is possible, 
comprising: 

A command whose 1 or two or more processors are operated so that said permission may be 
processed and said permission may judge whether said command which operates 1 or two 
or more processors needs to mount an exemption mechanism. 

A command which operates 1 or two or more processors according to judgment that said 
permission does not need to mount an exemption mechanism so that a set of said 
restrictions may be led based on said permission. 

[Claim 35]A medium in which the computer reading according to claim 34 is possible, 
comprising: 

A command which operates 1 or two or more processors so that said restrictions may be 
drawn and said command which operates 1 or two or more processors may judge whether 
said permission has specified a set of a parameter. 

A command which operates 1 or two or more processors according to judgment that said 
permission has specified a set of a parameter so that a set of said restrictions may be led 
based on said parameter. 

[Claim 36]A medium in which the computer reading according to claim 34 is possible, 
comprising: 

A command which operates 1 or two or more processors so that said restrictions may be 
drawn and said command which operates 1 or two or more processors may judge whether 
said permission has specified a set of a parameter. 
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A command which operates 1 or two or more processors so that an index of being a thing 
without restriction of said mounting may be prepared according to judgment that said 
permission has not specified a set of a parameter. 

[Claim 37]A medium in which the computer reading according to claim 29 is possible, 
comprising: 

A command which operates 1 or two or more processors so that it may judge whether it 
needs to mount an exemption mechanism in which said permission is [ said command 
which operates 1 or two or more processors ] specific so that said permission may be 
processed. 

A command which operates 1 or two or more processors according to judgment that it needs 
to mount an exemption mechanism in which said permission is specific so that a set of 
exemption restrictions may be accessed, and a command which operates 1 or two or more 
processors so that said permission and said exemption restrictions may be adjusted in order 
to draw said restrictions. 

[Claim 38]A medium in which the computer reading according to claim 37 is possible, 
comprising: 

A command whose 1 or two or more processors said command which operates 1 or two or 
more processors operates so that said exemption restrictions may judge whether it permits 
that said specific exemption mechanism is mounted to said mounting so that said 
permission and said exemption restrictions may be adjusted. 

A command which operates 1 or two or more processors so that said exemption restrictions 
may draw said restrictions based on said exemption restrictions according to judgment that 
it permits that said specific exemption mechanism is mounted to said mounting. 
[Claim 39]A medium in which the computer reading according to claim 37 is possible, 
comprising: 

A command whose 1 or two or more processors said command which operates 1 or two or 
more processors operates so that said exemption restrictions may judge whether it permits 
that said specific exemption mechanism is mounted to said mounting so that said 
permission and said exemption restrictions may be adjusted. 

A command which operates 1 or two or more processors so that said exemption restrictions 
may access a set of initial restriction according to judgment that it does not permit that said 
specific exemption mechanism is mounted to said mounting, and a command which 
operates 1 or two or more processors so that said restrictions may be drawn based on said 
initial restriction. 

[Claim 40] said exemption restrictions - two or more law -- a medium which is what is 
drawn by merging a policy and extracting restrictions restrictions from there and in which 
the computer reading according to claim 37 is possible. 

[Claim 41] So that it may judge whether there is any permission given to said application, A 
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medium by which said command which operates 1 or two or more processors was provided 
with a command which operates 1 or two or more processors so that a Call Stack might be 
scrutinized, in order to judge any application which required said mounting is and in which 
the computer reading according to claim 29 is possible. 

[Claim 42] So that it may judge whether there is any permission given to said application, A 
medium by which said command which operates 1 or two or more processors was further 
provided with a command which operates 1 or two or more processors so that said 
application might be attested and in which the computer reading according to claim 41 is 
possible. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] Especially this invention relates to the mechanism for determining 
the restrictions imposed on mounting of the service demanded by application about a 
computer system. 
[0002] 

[Description of the Prior Art] For years, the U.S. Department of Commerce regulated export 
of the computer program or application containing a data encryption algorithm, and has 
forbidden depending on the case. The computer program which is using the encryption 
algorithm using the encryption key more than the fixed number of bits as a present 
principle cannot be exported (the length of the key which can be specified is peculiar to an 
algorithm). There is also an exception in this rule. One of the exceptions can increase the 
length of a key, i.e., the encryption strength of a program, by the case where the exemption 
mechanism is adopted, depending on the case. There are key escrow (key escrow), the key 
recovery (key recovery), and the key weakening (key weakening) in the example of an 
exemption mechanism. The length of a key can be enlarged depending on the kind of 
program. For example, the application for a medical institution and financial institutions 
enlarges the length of a key, and the present regulation permits what the safety of 
application is improved for (it is used for protection of advanced security data). While there 
is blessed application with larger tolerance level than other applications, export control is 
needed for all encryption applications. 
[0003] 

[Problem(s) to be Solved by the Invention]These regulations are applied also to the program 
which it is not only applied to the program which is using the encryption algorithm directly, 
but has an interface to the program which is using the encryption algorithm directly. The 
"framework" program which provides the infrastructure for performing the interaction 
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during various programs smoothly is included in a program. Although the framework itself 
does not mount any encryption algorithms, it is permissible that one or more programs 
which mount the encryption algorithm interface to a framework, or carry out "plug-in" to a 
framework. It is Java Cryptography Extension of Java Platform by [ of the example of such 
a framework ] Sun Microsystems, Inc. of California and Palo Alto in one. In permitting that 
a framework carries out "plug- in" of the cipher device style to a framework, export control is 
needed for the framework itself. This means that a framework needs to guarantee that all 
the export control is protected irrespective of code mounting [ BURAGUIN / mounting / the 
framework ], in order to be made to be possible [ export ]. In order to offer this guarantee, a 
framework needs to restrain code mounting with one of mechanisms. 
[0004] 

[Means for Solving the Problem]If this invention is followed, a mechanism in which 
mounting which imposes restrictions on service and by which custom-made ** was carried 
out is built dynamically is provided. For the purpose of this invention, service is defined as 
a broad sense and includes all functions provided to a demand or this application by 
application including encryption/decoding function (however, not limited to this). In one 
embodiment of this invention, an invention is realized within a system provided with 
general mounting and a framework of application and specific service. 
[000 5] A framework receives a demand of mounting of specific service, for example, 
mounting of a specific encryption algorithm, from application. When restrictions of a 
framework exist corresponding to this, restrictions which need to be imposed on demanded 
mounting are determined. In one embodiment, when these restrictions are determined and 
there is this permission by judging whether a framework has the permission given to said 
application, in order to lead a set of restrictions imposed on said mounting, this permission 
is processed. In one embodiment, this permission is processed so that a set of restrictions 
led may serve as the smallest restrictions degree. If these restrictions are determined, a 
framework will build demanded mounting dynamically. In one embodiment, demanded 
mounting is built so that it may incorporate enforcement logic which imposes restrictions 
on general mounting of said service, said restrictions, and said general mounting. Since 
demanded mounting was built for said application, it was customized for [ the ] applications. 
Therefore, this mounting is called mounting by which custom-made ** was carried out. 
[0006]After mounting by which custom-made ** was carried out is built dynamically, a 
framework provides application with mounting by which custom-made ** was carried out. 
Then, application calls directly mounting by which custom-made ** was carried out for 
service. Since restrictions and enforcement logic for imposing it are included in mounting 
by which custom-made ** was carried out, the application does not need to act on a 
framework and mutual further. The mounting itself by which custom-made ** was carried 
out will provide service, and restrictions will be added certainly. Thus, according to 
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dynamic construction of mounting by which custom-made ** was carried out, restrictions 

which needs a framework for service provided to application can be added. 

[0007] 

[Embodiment of the Invention]The block diagram of the system 100 by which one of the 
embodiments of this invention is realized is shown in drawing 1 . The framework 102 for 
performing smoothly the interaction between 1, two or more applications 104 and 1 or two 
or more general mounting 106, the set 108 of the specified restriction, and various kinds of 
components is included in this system 100. The application 104 requires mounting of 
service of the framework 102, and receives it. Here, various kinds of applications or 
programs may be sufficient as the application 104, and it contains a Java applet, Java 
application, the application (not limited to these) compiled native, etc. For the purpose of 
this invention, the term of "service" is defined as a broad sense, and includes all the 
functions provided to a demand or this application by application including 
encryption/decoding function (however, not limited to this). 

[0008]The application 104 specifies the kind of service for mounting which it desires, when 
requiring mounting of the framework 102. For example, the application 104 can require 
mounting of the "Blowfish" encryption algorithm. Corresponding to this, the framework 102 
provides the applications 104 which have advanced the demand with mounting of the 
demand service by which custom-made ** was carried out at the application 104. 
Restrictions of the service which a framework provides are included in mounting which is 
provided by the framework 102 and by which custom-made ** was carried out. These 
restrictions are determined based on the set of the specified restriction 108, and the 
permission 110 observed in the application 104 which has advanced the demand if it was so 
that it may mention later. 

[0009]The general mounting 106 expresses mounting of the service which "plug-in" is 
carried out to the framework 102, or interfaces. Each of the general mounting 106 realizes 
service of a specific kind. For example, one general mounting mounts the "Blowfish" 
encryption algorithm, and another mounting mounts a DES encryption algorithm 
simultaneously. Each of the general mounting 106 is not restrained. That is, even if the 
restriction 108 or the permission 110 exists, mounting 106 general the very thing is not 
barred by restrictions. By this, when the general mounting 106 is mounting of an 
encryption algorithm, an encryption algorithm can be set as perfect intensity. The 
framework 102 guarantees that suitable restrictions are added to the service provided for 
the application 104, and it is not the general mounting 106 so that it may explain below. 
[0010]In the system 100, the framework 102 is a component which adjusts the whole 
operation of the system 100. The flow chart showing general operation of the framework 
102 is shown in drawing 2 . The framework 102 operates by receiving the demand of 
mounting (for example, mounting of a Blowfish encryption algorithm) of service of a specific 
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kind from the application 104 as shown in drawing 2 (202). When restrictions exist 
corresponding to this, the framework 102 judges restrictions required for demanded 
mounting (204). In one embodiment of this invention, if there is the framework 102 about 
the specified restriction 108, it will judge restrictions by adjusting with the permission 110 
observed in the application 104 which has advanced the demand. And in one embodiment of 
this invention, the framework 102 tends to add minimum restrictions as much as possible. 
In other words, in consideration of the permission 110 and the restriction 108, the 
framework 102 is tried so that generously as much as possible. 

[00 11] If restrictions are decided, the framework 102 will build demanded mounting 
dynamically (206). In one embodiment of this invention, demanded mounting is constituted 
by finding the general related mounting 106 which mounts the demanded kind (for example, 
general mounting 106 which realizes a Blowfish encryption algorithm) of service. If this is 
found, this general related mounting 106 will be included in demanded mounting with the 
restrictions determined before. The set of enforcement logic is also built into this demanded 
mounting. This enforcement logic guarantees that these restrictions are imposed on the 
general related mounting 106. Therefore, in spite of not attaching restrictions to mounting 
106 general related the very thing, enforcement logic serves as suitable restrictions applied 
to the general related mounting 106. General related mounting, the restrictions 
incorporated here, and enforcement logic are used, and the demanded construction of 
mounting is completed. Since demanded mounting incorporates construction, i.e., the 
demanded restrictions peculiar to application, specially to the demanded applications 104, 
demanded mounting can be seen to the demanded applications 104 as mounting by which 
custom-made ** was carried out. 

[0012] Construction of mounting by which custom-made ** was carried out will pass this 
mounting to the demanded application 104 (208). Then, the application 104 requires service 
of mounting by which custom-made ** was carried out directly. Since the enforcement logic 
for imposing restrictions and restrictions on mounting by which custom-made ** was 
carried out is incorporated, it becomes unnecessary for the application 104 to act on the 
framework 102 and mutual further. The mounting itself by which custom-made ** was 
carried out provides service, and restrictions come to be certainly added to service. By 
building dynamically mounting by which custom-made ** was carried out like this method, 
the restrictions which needs the framework 102 for the service provided for the application 
104 are added certainly. 

[0013]The above-mentioned explanation provides the general outline of this invention. 
Drawing 3 explains one embodiment of this invention in detail. By the following 
explanation, this invention is required and the service provided is explained in relation to 
object-oriented mounting which is cipher service. Note that this is used only for the purpose 
of explanation. This invention is not limited to the range of explanation. If it says 
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appropriately, this invention will generally be applied to all kinds of programming 
environment, and all the kinds to which restrictions need to be added of service. 
[00 14] The details of the framework 102 are shown in drawing 3 and drawing 4 . The 
framework 102 is provided with the application programming interface (API) 302, the 
service provider interface (SPI) 304, and the core 320 as shown in the figure. API302 
expresses the resource which the application 104 can call directly. API302 is provided with 
Cipher object classes 306 and ExemptionMechanism object classes 308 in one embodiment 
of this invention. It is mixed with other methods and Cipher object classes 306 is provided 
with a Getlnstance method and an Init method. A Getlnstance method is a method called 
by the application 104, when application requires mounting of service. Corresponding to 
this method call, the instance of Cipher object classes 306 is built and it is returned to the 
application 104 currently called. Custom-made ** of the returned Cipher instance is carried 
out for [ which is called ] applications, and it contains the enforcement logic for adding 
these restrictions to restrictions and the service which can provide a Cipher instance. If a 
Cipher instance is returned, call appearance of the method of a Cipher instance will be 
directly carried out by the application 104. One of the methods which need to be called by 
the application 104 currently called is an Init method. This method initializes a Cipher 
instance and enables it to operate a Cipher instance. The Init method operates as 
enforcement logic for adding restrictions to a Cipher instance. A Getlnstance method and 
an Init method are mentioned later in detail. 

[00 15] As already explained, when 1 or two or more exemption mechanisms (a key escrow, a 
key recovery, or key weakening) are mounted, the encryption algorithm (for example, key 
length was lengthened) which strengthened encryption strength depending on the case can 
be realized. When the exemption mechanism is mounted, ExemptionMechanism object 
classes 308 operates. This class provides two or more methods which can be called. In order 
that these methods may call the function of a specific exemption mechanism (for example, a 
key recovery block is generated when an exemption mechanism is a key recovery), It is 
called in order to judge whether required operation was performed (for example, was the 
key recovery block generated or not?). Object classes 306 and 308 of API302 is explained in 
detail later. 

[0016]SPI304 provides an interface required for a service provider, and carries out plug-in 
of the service mounting of a service provider to the framework 102. SPI304 is provided with 
SPI304 object classes corresponding to each API302 object classes in one embodiment of 
this invention. That is, CipherSpi object classes 310 of SPI304 corresponding to Cipher 
object classes 306 of API302 exists. And ExemptionMechanismSpi object classes 312 of 
SPI304 corresponding to ExemptionMechanism object classes 308 of API302 exists. This 
correspondence of 1 to 1 makes it easy to map the method of the API classes 306 and 308 in 
the method of the SPI classes 310 and 312. This importance is mentioned later in detail. 
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SPI object classes 310 and 312 is abstract object classes, and while the method which must 
be mounted by the class is shown, it means that object classes itself provides no mounting 
of these methods. A service provider takes charge of offer of mounting. In order to provide 
the mounting 106 of service, a service provider subclasses one of the object classes of 
SPI304, and mounting is prepared for [ all the ] the method in which the SPI class was 
defined as the subclass. Thus, the general mounting 106 shown in drawing 3 becomes a 
subclass of object classes 310 and 312 of SPI304. Each of the general mounting 106 can also 
mount service of a different kind. Each of (for example, a Blowfish encryption algorithm is 
mounted, and a DES encryption algorithm is mounted simultaneously, and a key recovery 
exemption mechanism can be mounted simultaneously) and the general mounting 106 can 
be realized without receiving no restrictions. General mounting 106 can also be carried out 
to come at mounting (for example, unrestricted in the length of an encryption key) of the 
maximum intensity. The core 320 of the framework 102 is provided with JCESecurity object 
classes 314 and JCESecurityManager object classes 316. In one embodiment of this 
invention, these object classes 314 and 316 is package private life, and cannot carry out 
direct access of the application 104. A JCESecurity class is provided with a Getlmpl method 
and a JCESecurityManager class is provided with a GetCryptoPermission method as 
shown in drawing 3 . These methods are called as a result of the call of the Getlnstance 
method of the Cipher class 306, collaborate and do the work of a large number required for 
dynamic construction of mounting by which custom-made ** was carried out. If the 
contents of all the systems are understood, you can understand well the function performed 
by these methods. Therefore, next, in order to understand all the inventions smoothly, the 
flow chart of drawing 5 and drawing 6 explains all the operations of a system. 
[0017]When it needs mounting of specific cipher service, the application 104 is calling the 
Getlnstance method of Cipher object classes 306, and advances the demand of mounting. In 
this call, application specifies the kind of service which is demanding mounting. In one 
embodiment of this invention, the kind of service becomes an encryption algorithm name 
like Blowfish, for example. The Cipher class 306 receives this demand (404), and calls the 
function of a Getlnstance method. Corresponding to this, a Getlnstance method calls the 
Getlmpl method of the JCESecurity class 314. A Getlmpl method performs two or more 
important functions. This method judges whether it is usable in the general mounting 106 
which mounts service of the demanded kind first (408). For example, it is judged whether 
either of the general mounting 106 mounts the Blowfish encryption algorithm. When the 
suitable general mounting 106 is not found, an error message is returned to the application 
104 which returns an error message to a Getlnstance method (412), next is called. On the 
contrary, when the general mounting 106 which mounts demanded service is found, a 
Getlmpl method keeps on whether attesting found general mounting, and judges (416). 
although the method of performing this attestation is mentioned later in detail, attestation 
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is performed here using a digital signature verification mechanism - only it explains. 
[0018]When a Getlmpl method judges that the general mounting is not attested, it is 
judged whether the general mounting 106 which can offer service demanded exists else 
(420). When the mounting 106 general to others does not exist, a Getlmpl method returns 
an error message to the application 104 which returns an error message to a Getlnstance 
method (424), next is called. When the general mounting 106 which can offer service 
demanded exists in others, a Getlmpl method judges whether it .returns to the process 416 
and general new mounting is attested. It continues until this processing is judged that the 
attested general mounting 106 which can offer service which attested mounting was found 
or was demanded does not exist. 

[0019]When the general mounting 106 (this mounting will be called related mounting) with 
which the demanded service was attested is found, A Getlmpl method instantiates related 
mounting and generates the instance (namely, Cipher SPI instance) of mounting (428). 
Then, a Getlmpl method judges whether it is necessary to add a certain restriction to the 
instance of mounting (432). In one embodiment of this invention, this judgment is made by 
judging whether it is set up for the operation with the internal framework 102, or global 
operation. Since export control is not applied when being set up so that a framework may be 
restricted to the use in the country, it is not necessary to add restrictions. The possibility of 
restriction is taken into consideration when set up, perform operation with the global 
framework 102 on the other hand. 

[0020] In order to judge the restrictions added to the instance of mounting, (436) and a 
Getlmpl method call the GetCryptoPermission method of the JCESecurityManager class 
316. The important function of a GetCryptoPermission method is adjusting the specified 
restriction 108 and the permission 110 observed in the application 104 currently called if it 
was, and leading the set of restrictions. The set of these restrictions is returned to a 
Getlmpl method by the GetCryptoPermission method. And in one embodiment of this 
invention in the set of these restrictions. Some cryptographic parameters, such as a 
demanded name of an encryption algorithm, a name of the exemption mechanism which 
needs to be imposed (supposing it exists), the maximum key length, the maximum 
execution repetition number (required for algorithms, such as RC5) of a code which are 
used, are contained. A Getlmpl method will judge whether the exemption mechanism is 
specified within these restrictions, if these restrictions are received (440). When the 
exemption mechanism is not specified within restrictions, he follows a Getlmpl method to 
the process 448. 

[0021] However, when the exemption mechanism is specified, a Getlmpl method continues 
and generates the instance of the specified exemption mechanism. In one embodiment of 
this invention, this calls the Getlnstance method of the ExemptionMechanism class 308, 
and is attained by telling the name of an exemption mechanism. To this call, the 
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Getlnstance method of the ExemptionMechanism class 308, The Getlmpl method of the 
JCESecurity class 314 is called (this call wants to be cautious of becoming the call of the 
2nd of a Getlmpl method). Corresponding to this, a Getlmpl method searches the effective 
general mounting 106 which mounts the specified exemption mechanism, instantiates the 
general mounting 106 (444), and generates an ExemptionMechanismSpi instance. Then, a 
Getlmpl method returns an ExemptionMechanismSpi instance to the Getlnstance method 
of the ExemptionMechanism class 308 (this is the return from the call of the 2nd of a 
Getlmpl method). 

[0022] Next, the Getlnstance method of the ExemptionMechanism class 308, The 
constructor of the ExemptionMechanism class 308 is called and the 
ExemptionMechanismSpi instance returned from the Getlmpl method is passed to a 
constructor. When called, a constructor instantiates the ExemptionMechanism class 308 
and generates an ExemptionMechanism instance. Next, a constructor encapsulates an 
ExemptionMechanismSpi instance in an ExemptionMechanism instance. It maps in a 
method [ method / of an ExemptionMechanism instance / constructor / in that case / 
instance / ExemptionMechanismSpi ]. The Init method of an ExemptionMechanism 
instance is mapped by the Enginelnit method of an ExemptionMechanismSpi instance in 
one embodiment of this invention, A GenExemptionBlob method is mapped by the 
EngineGenExemptionBlob method. As for this mapping, a call in the method of an 
ExemptionMechanism instance is sent to the right method of an ExemptionMechanismSpi 
instance. If an ExemptionMechanismSpi instance is encapsulated in an 
ExemptionMechanism instance, instantiation of an ExemptionMechanism instance will be 
completed. 

[0023]Then, a Getlmpl method returns to the Getlnstance method of the Cipher class 306 
(this). A certain Getlnstance method is provided with the instance of mounting, the set of 
restrictions, and (supposing it is) an ExemptionMechanism instance by the return from the 
1st call of a Getlmpl method. Next, the Getlnstance method of the Cipher class 306, The 
constructor of the Cipher class 306 is called and the instance of mounting received from the 
Getlmpl method to the constructor, the set of restrictions, and (supposing it is) an 
ExemptionMechanism instance are passed. Corresponding to this, a constructor 
instantiates the Cipher class 306 (448) and generates a Cipher instance. Next, a 
constructor encapsulates the instance of mounting, the set of restrictions, and (supposing it 
is) an ExemptionMechanism instance in a Cipher instance (452). That is, the Cipher 
instance operates as a "wrapper" object. A constructor is mapped in the instance method of 
mounting corresponding to the case where the instance of mounting is encapsulated to a 
Cipher instance, for the method of a Cipher instance. In one embodiment of this invention, 
the Init method of a Cipher instance, It is mapped by the Enginelnit method of the instance 
of mounting, a Update method is mapped by the EngineUpdate method, and a DoFinal 
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method is mapped by the EngineDoFinal method. This mapping is sent to the method of the 
instance of right mounting of a call in the method of a Cipher instance. Since mounting of 
these methods is provided by the instance of mounting, it becomes such. If encapsulation 
processing is completed, a constructor will return to the Getlnstance method of the Cipher 
class 306. Next, a Getlnstance method returns to the application 104 currently called, and 
provides the Cipher instance newly built by the application 104 (456). Then, the application 
104 currently called can call the method of a Cipher instance directly. 
[0024] In one embodiment of this invention, one of the first methods to which the 
application 104 currently called needs to call a Cipher instance is an Init method. This 
method initializes a Cipher instance and prepares an Init method for the usual operation. 
While calling this method, the application 104 currently called provides the set of 
initialization parameters. In one embodiment of this invention, the encryption key used for 
encryption and other arbitrary cryptographic parameters which have specified the 
attribute peculiar to algorithms, such as a repetition number of a code, are contained in 
these parameters (when a specific encryption algorithm needs). 
[0025]When an Init method is called, an Init method compares the initialization 
parameters passed by the application 104 currently called with the restrictions 
encapsulated in the Cipher instance. When initialization parameters are a level of 
restrictions, or less than it, an Init method is passed to the Enginelnit method of the 
instance of mounting of initialization parameters, and enables it to initialize the instance of 
mounting. After the instance of mounting is initialized, operation of a Cipher instance is 
attained, thus, the application 104 which is calling the Update method and DoFinal method 
of the Cipher instance in order to perform operation of encryption/decryption -- therefore, it 
can call. However, when it is judged that the level of restrictions with which the 
initialization parameters passed by the application 104 which the Init method is calling 
were encapsulated was exceeded. An Init method is made not to be passed to the Enginelnit 
method of the instance of mounting of initialization parameters. It is made not to initialize 
by it, the instance, i.e., the Cipher instance, of mounting. When a Cipher instance is not 
initialized, it becomes impossible for the Cipher instance to operate normally. Thus, an Init 
method is prevented from operating a Cipher instance effectively by not initializing. By this 
method, the encapsulated restrictions commit an Init method as enforcement logic which 
ensures being imposed on the instance of mounting. 

[0026]When an ExemptionMechanism instance is encapsulated in a Cipher instance, the 
Init method of the Cipher class 306 performs an additional function. The function ensures 
performing required operation, before an ExemptionMechanism instance is called correctly 
and performs a data encryption with the application 104. For example, when an exemption 
mechanism is a key recovery, before enciphering data, it is necessary to call an 
ExemptionMechanism instance, and to generate and save a key recovery block. In order to 
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ensure what required operation was performed for by the ExemptionMechanism instance, 
an Init method calls the IsCryptoAllowed method of an ExemptionMechanism instance. In 
one embodiment of this invention, an ExemptionMechanism instance, Information is held 
in it about whether the GenExemptionBlob method was called (the ExemptionMechanism 
instance is the origin by which operation of a required exemption mechanism is performed). 
An IsCryptoAllowed method is called and this information can access it. Operation which 
needs this IsCryptoAllowed method was performed (.). That is, when what the 
GenExemptionBlob method was called for is shown, an Init method enables it to initialize, 
the instance, i.e., the Cipher instance, of mounting. Since it keeps an Init method from the 
ability of initialization to do when required operation is not performed, the Cipher instance 
can operate no longer. Therefore, an Init method not only adds restrictions to the instance 
of mounting, but ensures that an exemption mechanism is applied. 
[0027]As mentioned above, it is a GetCryptoPermission method of the 

JCESecurityManager class 316 which judges the restrictions added to the service provided 
by the Cipher instance. These restrictions will be determined as the specified restriction 
108 based on the permission HQ observed in the application 104 currently called, if it is. 
Although one embodiment of a GetCryptoPermission method is described below, before 
describing an embodiment in detail, in order to understand all this inventions smoothly, the 
restriction 108 and the permission 110 are explained briefly. 

[0028]In one embodiment of this invention, the restriction 108 comprises two-set restriction 
of default configuration and exemption setting out. Fundamentally, default configuration 
specifies the initial restriction which needs to be added to an encryption algorithm, when 
the exemption mechanism is not mounted. And when the exemption mechanism is mounted, 
the restriction which needs to be added to an encryption algorithm is specified as exemption 
setting out. Generally, when the exemption mechanism is mounted, a firm cryptographic 
parameter can be used. In one embodiment of this invention, restriction of both setting out 
is due to the law and regulation which are applied. 

[0029] Each setting out (default configuration or exemption setting out) of restriction 
comprises 0 or one or more entries. Some restrictions added to a specific encryption 
algorithm and its algorithm are specified as each entry. The entry of each setting out about 
restriction is having the same structure. In one embodiment of this invention, each entry 
comprises the field or the information container which saves the following information. 
(1) Restriction of a code peculiar to the algorithm of others, such as the maximum repetition 
number of a code, by which an encryption algorithm name, an identifier (2) exemption 
mechanism name or the identifier (3) maximum key length, and (4) execution are carried 
out [0030] Because of the purpose of this invention, any desirable forms are possible for an 
entry. For example, it can mount as an object with the required information encapsulated in 
it in each entry, and each entry can also be made into the combination of a text in a file. As 
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long as right information is provided, any desirable thing forms can be used. 
[0031]The example of the default configuration of restriction and exemption setting out is 
shown in drawing 7 . In the entry of default configuration, it is cautious of an exemption 
mechanism specifying neither but certainly specifying an exemption mechanism by the 
entry of exemption setting out. Since default configuration specifies the restrictions added 
when the exemption mechanism is not mounted and exemption setting out specifies the 
restrictions added when the exemption mechanism is mounted, it becomes such. 
[0032]The interpretation of the default configuration of restriction is easy. Fundamentally, 
each entry expresses the maximum cryptographic parameter about a specific encryption 
algorithm. Therefore, with a Blowfish algorithm, the 128-bit maximum key length is used 
like drawing 7 . Similarly, in RC5 algorithm, the 64-bit maximum key length and the 
maximum repetition number of 10 times of codes are used. The interpretation of exemption 
setting out is easy almost similarly. Fundamentally, the 1st entry of exemption setting out 
shows that the maximum key length is made to increase and it is made to 256 bits, when 
the key recovery exemption mechanism is mounted with the Blowfish algorithm. Similarly, 
it is shown that the 2nd entry makes the maximum key length increase, and is made to 256 
bits when the key escrow exemption mechanism is mounted with the Blowfish algorithm. 
Note that the same algorithm name (in this case, Blowfish) can be described for two or more 
entries in exemption setting out. If the exemption mechanisms specified as these entries 
differ, the same algorithm name can be described. 

[0033]The restriction 108 specified is a part of only factor taken into consideration by the 
determination of the restrictions added to a Cipher instance. The permission 110 observed 
in the application 104 currently called exists, then another factor is them. As explained 
above, firm cryptography can be used for a kind like the application for a medical 
institution and financial institutions of application compared with other applications. The 
authority to use firm cryptography with the application for a medical institution and 
financial institutions or other applications is reflected in the permission 110 observed in 
application. In one embodiment of this invention, the permission 110 takes one of two or 
more forms. The 1st form is CryptoAllPermission information. When application is given 
CryptoAllPermission, all the permissions in which the meaning is possible to application 
will be given. In other words, application is not restricted. This enables the highest 
permission that can be accepted, therefore is observed in the application of a **** small 
number. 

[0034]Permission lower than this which is observed in application is permission for 
strengthening the encryption strength of a specific cryptographic algorithm, or mounting 
indefinitely. In one embodiment of this invention, this kind of permission specifies the 
combination (for example, the maximum key length) of a specific algorithm name (for 
example, Blowfish) and arbitrary maximum parameters. When the combination of a 
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maximum parameter is specified, an encryption algorithm may be mounted on the level of 
the maximum parameter specified. When the combination of a maximum parameter is not 
specified, an encryption algorithm may be mounted on arbitrary levels (that is, an 
algorithm is not restrained). Thus, when Blowfish is specified with the 128-bit maximum 
key length by permission, the application can use a Blowfish encryption algorithm by the 
128-bit maximum key length. Only in the case that Blowfish is specified by permission, the 
application can use a Blowfish encryption algorithm, without being restricted to the length 
of a key. Until now, only the maximum key length was explained about the maximum 
parameter. The maximum parameter should be cautious of the ability of another 
parameters, such as the maximum repetition number of a code, to be included. Such an 
another parameter can also require encryption algorithms, such as RC5, therefore can also 
include them into a maximum parameter. 

[0035] Other permissions observed in application are permissions for mounting a specific 
exemption mechanism in a specific encryption algorithm (for example, key recovery which 
uses Blowfish). If an exemption mechanism is mounted as mentioned above, application 
can usually use a firm cryptographic parameter (for example, long key length). Thus, the 
permission which mounts an exemption mechanism raises encryption strength 
dramatically. It is explained below by that permission is actually dependent on the contents 
of the restriction 108 whether it lends, and there is nothing or it is usable in mounting of an 
exemption mechanism. At this point, application must be noticed also about it being 
possible for two or more permissions to be accepted. For example, application can also 
mount two or more kinds of exemption mechanisms. One application can have two or more 
permissions accepted that case and in the case of others. 

[0036] Next, the flow chart of drawing 8 explains operation of the GetCryptoPermission 
method of the JCESecurityManager class 316 based on such background information. A 
GetCryptoPermission method receives the set of the parameter containing the encryption 
algorithm name (for example, Blowfish) demanded by the application 104 currently called, 
when it is called. Corresponding to a call, a GetCryptoPermission method determines the 
application 104 currently called first (604). That is, a GetCryptoPermission method 
determines the application 104 which called the Getlnstance method which became a cause 
by which a GetCryptoPermission method was called. In one embodiment of this invention, a 
GetCryptoPermission method makes this decision by examining a Call Stack in detail. This 
traces a call order and returns from a GetCryptoPermission method to a Getlmpl method, 
Next, it carries out by returning to a Getlnstance method and returning to the application 
104 which is calling the Getlnstance method first next. Like this method, by examining a 
Call Stack in detail, the beginning calls and a GetCryptoPermission method can determine 
the application 104. 

[0037] Determination of the application 104 currently called will determine whether the 
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application 104 currently called has a certain effective permission observed in it (608). In 
one embodiment of this invention, this is performed by determining first whether a certain 
permission was primarily given to the application 104. In one embodiment of this invention, 
this decision is made by checking the file related to the application 104 and checking 
whether a certain permission is included in this. By a Java programming environment, the 
file of application is included in a JAR file and uses this JAR file for the check of permission 
in this environment. 

[0038]When a certain permission is found, verification processing is performed and it is 
guaranteed that permission is effective. In one embodiment of this invention, this 
verification is performed using a digital signature. Specifically, the JAR file by which the 
digital signature was carried out exists in the arbitrary applications 104 including 1 or two 
or more permissions. The source of the application 104 is trusted and this digital signature 
ensures that the contents of the application 104 were not changed. When this digital 
signature is verified, it means that the permission included in a JAR file is effective. 
Permission is invalid when this digital signature is not verified. A GetCryptoPermission 
method performs this verification using a digital signature verification mechanism. A 
digital signature verification mechanism suitable because of the purpose of this invention 
and effective can also be used. 

[0039]When it is judged that the application 104 which the GetCryptoPermission method is 
calling does not have effective permission, A GetCryptoPermission method determines the 
restrictions added to a Cipher instance based on restriction of the default configuration of 
restriction (612). Specifically, a GetCryptoPermission method searches the default 
configuration entry of the entry of the same algorithm name as the encryption algorithm 
demanded by the application 104 currently called. After the entry is found, restrictions are 
drawn from the restriction (for example, the maximum key length and other restrictions) 
specified in the entry. For example, as for restrictions, the maximum key length will be set 
to 128-bit Blowfish like the example of drawing 7 . when the application 104 currently called 
is demanding mounting of a Blowfish algorithm. After restrictions are decided, restrictions 
are returned to the Getlmpl method of the JCESecurity class 314 by the 
GetCryptoPermission method (616). 

[0040]When it is judged that the application 104 which returns to the process 608 and the 
GetCryptoPermission method is calling has 1 or two or more effective permissions, A 
GetCryptoPermission method determines whether either of these permissions is 
CryptoAUPermission (620). In CryptoAllPermission, the application 104 is not restricted. 
In that case, a GetCryptoPermission method returns directions without restrictions to a 
Getlmpl method (624). However, when all permissions are not CryptoAllPermission(s), he 
follows a GetCryptoPermission method to the process 628. 

[0041]When it processes to the process 628, the application 104 has 1 or two or more 
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effective permissions, and it turns out that no these permissions are 

CryptoAllPermission(s). Therefore, it means that permission becomes either of two kinds of 
the following. 

(1) The kind (namely, kind which specifies the set of a specific encryption algorithm and an 
optional maximum parameter) which does not require the exemption mechanism which 
should be added, or the kind which requires the exemption mechanism which should be (2) 
Added (namely, kind which specifies an exemption mechanism with a specific encryption 
algorithm) 

[0042] At the process 628, a GetCryptoPermission method determines whether either of the 
permissions is a thing of the kind which does not require the exemption mechanism which 
should be added. When either of the permissions is this kind, it determines about whether 
that permission is applicable to each of those permissions (632). Permission is applicable 
when the encryption algorithm specified as permission is the same as the encryption 
algorithm demanded by the application 104. For example, one permission is applied when 
the application 104 is demanding mounting of a Blowfish algorithm, and the encryption 
algorithm specified as permission specifies the Blowfish algorithm. A maximum of one 
permission is applied in one embodiment of this invention. When determining that one of 
the permissions of a GetCryptoPermission method is applied, a GetCryptoPermission 
method, The restrictions added to a Cipher instance based on the maximum parameter 
(supposing it exists) specified as permission are determined. That is, when the set of a 
maximum parameter is specified as permission, restrictions are determined based on the 
specified maximum parameter. When the combination of the maximum parameter is not 
specified, restrictions become unrestricted and an encryption algorithm is not restrained. 
After restrictions are determined, restrictions are returned to the Getlmpl method of the 
JCESecurity class 314 by the GetCryptoPermission method (636). 

[0043] any of the permission which does not require the exemption mechanism in which it 
returns to the process 632 and a GetCryptoPermission method should be added although 
-- when being inapplicable is determined, it progresses to the process 640. At the process 
640, a GetCryptoPermission method determines whether either of the permissions given to 
the application 104 is a kind which requires the exemption mechanism which should be 
added. When such permission is not found, a GetCryptoPermission method determines the 
restrictions added to a Cipher instance using the default configuration of restrictions (644). 
The method of determining restrictions is the same as the method explained in relation to 
the above-mentioned process 612. After restrictions are decided, restrictions are returned to 
a Getlmpl method by the GetCryptoPermission method (648). 

[0044] On the other hand, when a GetCryptoPermission method determines that at least 
one of the permissions observed in the application 104 is a kind which requires the 
exemption mechanism which should be added, it progresses to the process 652. At the 
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process 652, a GetCryptoPermission method determines whether either of the permissions 
which require the exemption mechanism which should be added is applicable. Specifically a 
GetCryptoPermission method, Mounting of the exemption mechanism which could use the 
set of specific its encryption algorithm / exemption mechanism, or was specified determines 
whether to be usable or not to each of the permission which can be applied to the encryption 
algorithm as which which of these permissions is demanded, or is applied. When you 
perform these functions, refer to the exemption setting out of restriction for a 
GetCryptoPermission method. He can understand these operations well by illustration. 
[0045]The encryption algorithm demanded is a Blowfish algorithm and application 
presupposes that the following two kinds of permissions are accepted. 

(1) Blowfish, key weakening, and (2) Blowfish and a key recovery [0046] Exemption setting 
out of the restriction furthermore shown in drawing 7 is assumed. In this example both, 
since permission relates to Blowfish, both permissions apply to the demanded application. 
Therefore, both both permissions will be processed and it is begun to process them from the 
1st permission. Key weakening can be made to use the 1st permission with Blowfish. In 
order that this permission may determine whether to be usable or not, a 
GetCryptoPermission method searches exemption setting out with this combination of an 
entry. Although two entries of Blowfish exist in exemption setting out, neither of these 
entries specifies key weakening as an exemption mechanism. Therefore, this permission 
cannot be used or applied by that the combination of Blowfish which can use exemption 
setting out of restriction, and key weakening is not clearly shown to be and which is twisted. 
[0047] In this case, he follows a GetCryptoPermission method to processing of permission of 
the next which permits the key recovery used with Blowfish. This permission searches the 
entry of the same method as the beginning, i.e., exemption setting out, and is processed. 
This time, the entry which can use the combination as which Blowfish and a key recovery 
were specified is found. As a result, use or application of this permission is attained. 
However, an inquiry does not finish there. A GetCryptoPermission method determines 
whether to be usable in effective mounting of the specified exemption mechanism (this 
example key recovery), before accepting use of this permission. And this permission is not 
applied when not usable in mounting. When making this decision, a GetCryptoPermission 
method searches the effective general mounting 106 (drawing 4) which mounts the 
specified exemption mechanism. It will understand whether the GetCryptoPermission 
method can apply either of the accepted permissions by the end (652) of this processing. 
[0048] When a GetCryptoPermission method determines that permission is applicable, a 
GetCryptoPermission method uses not the default configuration of restriction but 
exemption setting out, and determines the restrictions added to a Cipher instance (656). 
Specifically, a GetCryptoPermission method draws restrictions from the entry of exemption 
setting out with the same algorithm name as this permission, and an exemption 
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mechanism. This entry is an entry of the beginning of exemption setting out in the target 
example, and those restrictions are Blowfish which the maximum key length equipped with 
a 256-bit key recovery. After these restrictions are decided, restrictions are returned to the 
Getlmpl method of the JCESecurity class 314 by the GetCryptoPermission method (660). 
The entry of exemption setting out enables it to usually use a cryptographic parameter 
firmer than default configuration, as mentioned above. Therefore, a GetCryptoPermission 
method raises the encryption strength of a Cipher instance by drawing restrictions of 
exemption setting out. 

[0049] When it returns to the process 652 and neither of the permissions can be applied, a 
GetCryptoPermission method uses the default configuration of restriction and determines 
the restrictions added to a Cipher instance (644). The method of determining restrictions is 
the same as the method explained above in relation to the process 612. Therefore, the 
application 104 is dealt with like the case where application is not given permission at all. 
After restrictions are decided, restrictions are returned to a Getlmpl method by the 
GetCryptoPermission method (648). Like the explained method, a GetCryptoPermission 
method determines the restrictions added to a Cipher instance. A GetCryptoPermission 
method tends to give the encryption strength maximum with all restrictions given to a 
Cipher instance by using initial restriction, when it is going to apply permission first, next 
applies neither of the permissions. In other words, a GetCryptoPermission method tends to 
add restrictions of a minimum level. 

[0050] As mentioned above, the default configuration of the restriction including all the sets 
(drawing 1) of the restriction 108 and exemption setting out are due to applicable law and 
regulation. In one embodiment of this invention, they are drawn based on the following two 
laws and regulations at least. 

(1) The U.S. exporting method and (2) local method (law of the country where the 
framework 102 is imported, or the area) 

[0051]Since the sets of these laws differ in almost all cases, regulated treatment is 
performed in order [ which is in agreement with the set of both laws ] to lead the set of one 
restriction. In one embodiment of this invention, this adjustment is performed using merge 
processing. The set of two laws is merged, and generates a set as a result of the restriction 
108, and, specifically, merge is performed by the way the obtained restriction 108 includes 
the restriction when the set of two laws was restrained most. By choosing the restriction 
restrained most, merge processing guarantees that the obtained restriction 108 follows the 
set of both laws. 

[00521 Drawing 9 expresses the outline of merge processing. The U.S. exporting method 702 
comprises the default component 706 and the exemption component 708 as shown in the 
figure. Similarly, the local method 704 comprises the default component 710 and the 
exemption component 712. The default components 706 and 710 specify the default 
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restriction applied to an encryption algorithm, when the exemption mechanism is not 
mounted. And the exemption components 708 and 712 specify restriction in case the 
exemption mechanism is mounted. In one embodiment of this invention, the default 
components 706 and 710 and the exemption components 708 and 712 are holding the same 
form as the default configuration 714 of restriction and the exemption setting out 716 
which were explained in relation to drawing 7 above. That is, each components 706, 710, 
708, and 712 comprise 0 or an entry beyond it. Each entry is provided with the field or the 
container for saving the following. 

(1) An encryption algorithm name, an identifier (2) exemption mechanism name or the 
identifier (3) maximum key length, and code restrictions of (4) others [0053]In order to 
draw the obtained restriction 108, the default components 706 and 710 are merged for 
every entry, and the default configuration 714 of the restriction 108 obtained is generated. 
The exemption setting out 716 of the restriction 108 produced by merging the exemption 
components 708 and 712 for every entry is generated. After this restriction is drawn, the 
obtained restriction 108 is used by the GetCryptoPermission method of the 
JCESecurityManager class 316, and determines the restrictions added to a Cipher instance. 
[0054]Next, one embodiment of merge processing is described along with the flow chart of 
drawing 10 and drawing 11 . The next explanation explains using the policy A, B, and C. 
The policies A and B point out the sources of information (for example, the U.S. exporting 
method and a local method) of merge. The policy C points out a merge result (for example, 
obtained restriction 108). As shown in drawing 9 . the default components 706 and 710 and 
the exemption components 708 and 712 are independently merged using separate merge 
operation. However, note that the same merge processing is used by both merge. 
[0055]Now, merge processing begins from selection (804) of the next entry (in this case, the 
first entry) of the policy A like drawing 10 . It is determined whether compare the selected 
entry with the entry of the policy B, and a corresponding entry exists in the policy B (808). 
In one embodiment of this invention, this decision is made by comparing the selected 
algorithm name of an entry and exemption mechanism name with the algorithm name and 
exemption mechanism name of an entry of the policy B. If the algorithm of the same name 
as the entry of the policy B and the combination of an exemption mechanism exist, it will 
become an entry to which the entry corresponds. In this case, restriction of two 
corresponding entries is compared and it opts for the restriction restrained most (820). 
[0056] As an example of this method, the algorithm name of both policies A and B considers 
the entry in which an exemption mechanism does not exist by RC5. In 64 bits and the 
maximum repetition number, 12 and the maximum key length of the entry of the policy B 
consider it as 128 bits, and the maximum repetition number sets [ the maximum key length 
of the entry of the policy A] to 10. In this case, the maximum key length will be 64 bits and, 
as for the restriction restrained most, the maximum repetition number is set to 10. It opts 
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for the restriction most restrained for every restriction as shown in this example. 
[0057]A new entry is generated by the policy C after the restriction restrained most is 
decided (824). The same algorithm name as two corresponding entries and an exemption 
mechanism name exist in this new entry. The restriction for which it opted at the process 
820 and which was restrained most exists in this new entry as that restriction. The policy's 
C generation of a new entry will terminate processing of the entry chosen now. And 
judgment whether an entry exists in the policy A more is made (828). When an entry exists, 
processing is returned to the process 804, and the next entry of the policy A is chosen and 
processed. When an entry does not exist, processing is advanced to the process 832. 
[0058] It returns to the process 808, and when it is judged that the entry corresponding to 
the entry selected in the policy A does not exist in the policy B, judgment whether the entry 
of a wild card exists in the policy B is made (812). This wild card operates as a container for 
the combination of all the algorithm name / exemption mechanisms which are not shown in 
the policy B by showing clearly. When a wild card is not found in the policy B, processing of 
the selected entry is completed. A new entry is not generated, but processing progresses to 
the policy C to the process 828, in order to search the next entry of the policy A. 
[0059] On the other hand, when it is judged that the entry of a wild card exists in the policy 
B, the selected restriction of an entry and restriction of the entry of wildcard are compared, 
and it opts for the restriction restrained most (816). This decision is made by the same 
method as the explanation mentioned above about the process 820. A new entry is 
generated by the policy C after the restriction restrained most is decided (824). The same 
algorithm name as the selected entry and an exemption mechanism name exist in this new 
entry. The restriction which was decided by the process 816 and which was restrained most 
exists in this new entry as that restriction. The policy's C generation of a new entry will 
terminate processing of the entry chosen now. And judgment whether an entry exists in the 
policy A is made (828). When an entry exists, processing is returned to the process 804, and 
the next entry of the policy A is chosen and processed. This processing continues until all 
the entries of the policy A are processed. 

[0060] After all the entries of the policy A are processed, it becomes the watch which 
processes all the entries of the policy B which do not correspond to the entry of the policy A. 
However, before performing this, it is judged whether the entry of a wild card exists in the 
policy A (832). When the policy A does not have an entry of a wild card, since they do not 
become an entry of the addition created by the policy C, the additional entry of the policy B 
does not need to be processed any more. Thus, when the entry of a wild card does not exist 
in the policy A, construction of the policy C is completed (836). 

[0061] On the other hand, when the entry of a wild card exists in the policy A, processing of 
the policy B begins from selection of the next entry (in this case, the first entry) of the policy 
B (840). It is judged whether the selected entry is compared with the entry of the policy C, 
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and a corresponding entry exists in the policy C (844). In one embodiment of this invention, 
this decision is made by comparing the algorithm name of the selected entry, an exemption 
mechanism name, the algorithm name of the entry of the policy C, and an exemption 
mechanism name. When a corresponding entry is found in the policy C, the selected entry 
means already having been processed as a part of processing of the entry of the policy A. In 
this case, processing of the chosen entry is not needed. As a result, processing progresses to 
the process 856 and the next entry of the policy B is searched. 

[0062] On the other hand, when the selected entry supports neither of the entries of the 
policy C, it opts for the restriction which compared the selected restriction of an entry and 
restriction of the entry of the wildcard of the policy A, and was restrained most (848). This 
decision is made by the same method as the explanation mentioned above about the process 
820. A new entry is generated by the policy C after opting for the restriction restrained 
most (852). The same algorithm name as the selected entry and an exemption mechanism 
name will exist in this new entry. The restriction for which it opted at the process 848 as 
that restriction and which was restrained most will exist in this new entry. After a new 
entry is generated by the policy C, processing of the entry selected now is completed. And it 
is determined whether an entry exists in the policy B further (856). When an entry exists, 
processing is returned to the process 840, and the next entry of the policy B is chosen and 
processed. This processing continues until all the entries of the policy B are processed. 
Processing of all the entries will terminate construction of the policy C (860). 
[0063] Explained merge processing is performed by the initializer of the JCESecurity class 
314 in one embodiment of this invention. This initializer will be called shortly after the 
JCESecurity class 314 is called. When initializer is called, initializer merges two or more 
sets of the law with which initializer was provided, and generates all the sets 108 of 
restriction. All the sets 108 (it has default configuration and exemption setting out) of this 
restriction are generated, and this is used after that by the GetCryptoPermission method 
which determines the restrictions added to a Cipher instance. 

[0064]As mentioned above, the Getlmpl method of the JCESecurity class 314 takes charge 
of instantiation of the general related mounting 106, and generates the instance of 
mounting. As a part of instantiation processing, a Getlmpl method performs authenticating 
processing. In one embodiment of this invention, this authenticating processing becomes 
the form of the mutual recognition that a Getlmpl method attests the general related 
mounting 106, and the general related mounting 106 attests the framework 102. In order to 
enable this mutual recognition to produce in one embodiment of this invention, (1) The 
DESHITARU signature of the JAR file of the general related mounting 106 is carried out, 
(2) The DESHITARU signature of the JAR file of the framework 102 is carried out, (3) The 
set of the ambiguous reliance public key (obfuscated trusted public keys) which the 
JCESecurity class 314 can use for verification of a signature of the JAR file of general 
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related mounting is embedded, (4) The general related mounting 106 is embedded in the set 
of the reliance public key used for verification of a signature of the JAR file of a framework. 
[0065]This premise can be given and mutual recognition is performed as follows. First, the 
ambiguous reliance public key embedded in the JCESecurity class 314 is used, and the 
digital signature of the JAR file of general mounting to which a Getlmpl method relates is 
verified. When this digital signature is verified, a Getlmpl method instantiates the general 
related mounting 106, and the constructor of this general related mounting is called. When 
a constructor is called, a constructor uses the reliance public key embedded at the general 
related mounting 106, and verifies the digital signature of the JAR file of a framework. 
When a constructor determines that the digital signature of the JAR file of a framework is 
right, a constructor will build the instance of demanded mounting. When a digital 
signature is not right, a constructor returns an error. The instance of mounting will be built 
only a right case for both the general related mounting 106 and the framework 102 as 
shown in this explanation. 

[0066]By execution of this verification processing, a Getlmpl method trusts an external 
digital signature verification mechanism. That is, in one embodiment of this invention, the 
verification of a signature itself does not perform a Getlmpl method. On the contrary, a 
Getlmpl method shows an external digital signature verification mechanism the digital 
signature of the general related mounting 106, and an ambiguous reliance public key, and 
receives verification. In one embodiment of this invention, an external digital signature 
verification mechanism turns into a signature mechanism (Signature Mechanism) of Java 
Runtime. This signature mechanism is a part of total Java environment, and is not a part 
of framework 102. Therefore, if it sees from the framework 102, this signature mechanism 
is not the component "trusted." If the result which a signature mechanism can be right and 
can trust as a result is provided, before trusting it, it is verified in order for the signature 
mechanism itself to guarantee a lawful thing (that is, the right verifying function is 
performed). 

[0067]In order that it can verify a signature mechanism, at least two digital signatures are 
embedded into it at the JCESecurity class 314. It turns out that one is verifiable using an 
ambiguous reliance public key, and, as for another, it turns out that it is unverifiable using 
an ambiguous reliance public key. These signatures are shown in an order which cannot be 
predicted in a signature mechanism, and examine the legitimacy. One possible embodiment 
of processing which examines a signature mechanism is shown in drawing 12 . 
[0068] Verification processing begins from the determination (904) of the digital signature 
(digital signature possible [ verification ] or unverifiable) shown to a signature mechanism 
as shown in drawing 12 . This decision is made by the method which cannot be predicted to 
be a signature mechanism, and is performed in one embodiment of this invention using 
random processing. For example, a random number will be generated and, in the case of the 
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range (it is in agreement with 0) with a random number, one of the signatures will be 
chosen. In the case of range (it is in agreement with 1) with an another random number, 
another signature will be chosen. In one embodiment of this invention, a decision of the 
process 904 is made, even if it takes the before selected signature into consideration. Other 
signatures are chosen by the process 904 when all before selected signatures are the same 
signatures. At least one each of two signatures is chosen, and this guarantees examining 
the legitimacy of a signature mechanism thoroughly. 

[0069] After one of the signatures is chosen, it is shown to a signature mechanism for 
verification of the selected signature and an ambiguous reliance public key (908). Next, a 
signature mechanism provides the response which shows one of whether the signature was 
verified or it was not verified. This response is received (912) and accuracy is checked (916). 
When the signature which the signature mechanism was shown is specifically able to be 
verified, the response is checked by the index which shows that the signature was verified. 
When the signature which the signature mechanism was shown is not able to be verified, 
the response is checked by the index which shows that the signature is not verified. When 
the response received to the shown signature is not right, it is decided that a signature 
mechanism will not be lawful (920). In this case, verification processing is completed (924). 
[0070]In a right case, the response received to the shown signature on the other hand 
makes a decision about whether verification processing was performed n times (928). Here, 
n is arbitrary desirable numbers (for example, 5). When not performing n times, processing 
is returned to the process 904, a signature is shown to a signature mechanism once again, 
and a response is examined. When processing is performed n times, processing is advanced 
to the process 932. When it processes to the process 932, it turns out that the signature 
mechanism provided the right response to the signature which ****** was shown, 
respectively (when a response is not right, processing will be completed at the process 924, 
without resulting to the process 932). Thus, it is decided that a signature mechanism will 
be lawful (932). In this case, a signature mechanism may be trusted by the Getlmpl method 
which attests the general related mounting 106. Verification of that a signature mechanism 
is lawful will terminate verification processing (936). 

[0071]The result of the above-mentioned processing is that a signature mechanism is 

shown a verifiable digital signature and unverifiable digital signature in an order 

[ ********** ] # Even if it is not impossible, it will be very difficult for verification processing 

"to forge" a right response of an inaccurate signature mechanism by making this 

presentation order into a prediction impossibility. Therefore, this verification processing 

provides the efficient method of examining the legitimacy of an external signature 

mechanism. 

[0072]Verification processing was related to the digital signature verification mechanism, 
and has so far been explained. However, it must be cautious of processing not being limited 
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to a digital signature verification mechanism. On the contrary, verification processing is 
generally applied and examines the legitimacy of the arbitrary mechanisms which are not 
trusted. As long as at least two different information setting exists about the known right 
response, processing is applied in order to examine the legitimacy of the mechanism which 
is not trusted. The method generally applied in the mechanisms which are not trusted in 
which verification processing is arbitrary is shown in the flow chart of drawing 13 . 
[0073]Verification processing begins from the determination shown to the mechanism in 
which either of at least two information setting is trusted as shown in drawing 13 (1004). 
The process 1004 of this determination is performed by the method which cannot be 
predicted for the mechanism which is not trusted, and is performed in one embodiment of 
this invention using random processing. For example, a random number will be generated 
and, in within the limits (it is in agreement with 0) with a random number, the first 
information setting will be chosen. In within the limits (it is in agreement with 1) of others 
[ number / random ], another information setting will be chosen. In one embodiment of this 
invention, the process 1004 of determination also takes the before selected information 
setting into consideration. When all before selected selections are the same information 
setting, other information setting is chosen by the process 1004. This has guaranteed 
examining thoroughly the legitimacy of the mechanism which each of information setting is 
chosen once [ at least ], and is not trusted. 

[0074] After one of the information setting is chosen, it shows the mechanism in which the 
selected information setting is trusted (1008). Next, the mechanism which is not trusted 
provides the response to the shown information setting. This response is received (1012) 
and accuracy is checked (1016). Specifically, the right response of each information setting 
comes to be known. When it is not the right response of the information setting shown the 
received response, it is determined that the mechanism which is not trusted is not lawful 
(1020). In this case, verification processing is completed (1024). 

[0075] When it is the right response of the information setting shown the received response 
on the other hand, a decision about whether verification processing was performed n times 
is made (1028). Here, n is arbitrary desirable numbers (for example, 5). When not 
performing n times, processing is returned to the process 1004, it shows the mechanism in 
which information setting is trusted once again, and a response is examined. When 
processing is performed n times, processing progresses to the process 1032. When it 
processes to the process 1032, it turns out that the mechanism which is not trusted 
provided the right response to all the shown information setting, respectively (when a 
response is not right, processing will be completed at the process 1024, without resulting in 
the process 1032). Thus, it is determined that the mechanism which is not trusted is lawful 
(1032). Verification of that the mechanism which is not trusted is lawful will terminate 
verification processing (1036). 
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[0076]The result of the above-mentioned processing is shown to the mechanism two 
information setting not being trusted, in an order [ ********** ]. Even if it is not impossible, 
it will be very difficult for verification processing "to forge" a right response of the 
inaccurate mechanism which is not trusted by making this presentation order into a 
prediction impossibility. Therefore, this verification processing provides the efficient 
method for examining the legitimacy of the arbitrary mechanisms which are not trusted. 
[0077] [Outline of hardware] In one embodiment of this invention, this invention is mounted 
as an instruction set which 1 or two or more processors can perform. This invention can be 
mounted as some object-oriented programming system containing Sun Microsystems of 
State Mountain View of California, and the Java (registered trademark) programming 
system by an Inc. company and which is not limited to this. The block diagram of the 
hardware of the computer system 1100 in which the embodiment of the invention is 
mounted is shown in drawing 14 . The computer system 1100 contains the processor 1104 
which is connected to the bus 1102 used for communication of information or other 
transmitter styles, and the bus 1102, and processes information. The main memory units 
1106, such as random access memory (RAM) or other dynamic storage, are also built into 
the computer system 1100, and the information and command which it is connected to the 
bus 1102 and the processor 1104 executes are saved at it. The main memory unit 1106 is 
used also when the processor 1104 saves a temporary variable or other intermediate 
information which are used during execution of a command. The computer system 1100 
contains the read-only memory (ROM) 1108 or other static storages for which the static 
information which it is connected to the bus 1102 and the processor 1104 uses, and a 
command are saved. It is connected to the bus 1102 and the memory storage 1110, such as a 
magnetic disk or an optical disc, is used for preservation of information and a command. 
[0078]It is connected to the display 1112 of a cathode-ray tube (CRT) etc. via the bus 1102, 
and the computer system 1100 displays information on a computer user. It is connected to 
the bus 1102 and the input devices 1114 including an alphanumeric character key and 
other keys send selection of information and a command to the processor 1104. A different 
user input device from a key has the cursor control 1116, such as a mouse, a trackball, or a 
cursor arrow key, selection of direction information and a command is sent to the processor 
1104, and a motion of the cursor of the display 1112 is controlled. This input device usually 
has the biaxial flexibility of 2 times of the 1st axis (for example, x) and the 2nd axis (for 
example, y), and can specify the position within a flat surface. 

[0079]According to one embodiment, the computer system 1100 provides the function of this 
invention according to the processor 1104 which performs 1 stored in the main memory unit 
1106, 1 of two or more commands, or two or more sequences. Such a command is read into 
the main memory unit 1106 from media other than the main memory unit which can read 
computers, such as the memory storage 1110. Based on the instruction sequence stored in 
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the main memory unit 1106, the processor 1104 performs the processing step explained 
here. It can also be used as another embodiment, being able to replace a hard-wired circuit 
with the software instruction which mounts an invention. A hard-wired circuit can also be 
used combining the software instruction which mounts an invention. Thus, the 
embodiment of an invention is not limited to the arbitrary combination of hardware 
circuitry and software. 

[0080]The term of "the medium which a computer can read" currently used here shows the 
arbitrary media related to providing with a command the processor 1104 used for execution. 
Although such a medium is not limited to a nonvolatile medium and volatility medium and 
a transmission medium, there is form of a large number containing them. For example, 
there are an optical disc or magnetic disks, such as the memory storage 1110, in a 
nonvolatile medium. There is dynamic storage, such as the main memory unit 1106, in a 
volatile medium. There are coaxial cables including the wiring which constitutes the bus 
1102, copper wire, and an optical fiber in a transmission medium. A transmission medium 
also becomes forms, such as a sound wave or electromagnetic waves, for example, an 
electric wave, infrared rays, and a wave generated during optical data communication. 
[0081] For example, in a general form of the medium which a computer can read. A floppy 
(registered trademark) disk, a flexible disk, a hard disk, Magnetic tape or other magnetic 
media, CD-ROM, other optical media, There is a memory chip of a punch card, a paper 
streamer, another physical perforation-type medium, RAM, PROM and EPROM, 
FLASH-EPROM, and others or a cartridge, a subcarrier mentioned later, or a medium 
which can read other computers. 

[0082] Carrying 1, 1 of two or more commands, or two or more sequences to the processor 
1104 which executes a command is also included in various kinds of medium which a 
computer can read. For example, a command is first carried by the magnetic disk on a 
remote computer. A remote computer loads a command to the dynamic storage, and 
transmits a command on a telephone wire using a modem. To the computer system 1100, a 
local modem receives data with a telephone wire, and changes data into an infrared signal 
using an infrared transmitter. An infrared detector receives the data of an infrared signal 
and a suitable circuit arranges data on the bus 1102. The bus 1102 carries data to the main 
memory unit 1106. And the processor 1104 takes out and executes a command. The 
command which the main memory unit 1106 received is optional to one of the back before 
the processor 1104 performs, and is saved at the memory storage 1110. 
[0083]The computer system 1100 includes again the communication interface 1118 
connected to the bus 1102. The data communications of a 2-way are possible for the 
communication interface 1118, and it is connected also with the network link 1120 for 
connecting with the local network 1122. For example, the communication interface 1118 can 
also use an integrated services digital network (ISDN) card or data communication 
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connection as the modem with which the corresponding telephone wire of a kind is provided. 
The communication interface 1118 can also use data communication connection as the 
Local Area Network (LAN) card with which compatible LAN is provided as other examples. 
A radio link can also be mounted. By such mounting, the communication interface 1118 
transmits and receives the electrical and electric equipment, electromagnetism, or 
lightwave signal which carries the flow of the digital data which is various kinds of 
information. 

[0084]The network link 1120 usually makes possible the data communications to other data 
stations using 1 or two or more networks. For example, the network link 1120 provides 
connection to the data station currently managed by the host computer 1124 or Internet 
Service Provider (ISP) 1126 using the local network 1122. Next, ISP1126 provides data 
transmission services using the global packet data communication network currently 
generally called "Internet" 1128. Both the local network 1122 and the Internet 1128 use the 
electrical signal, the electromagnetic signals, or the lightwave signal which carries the flow 
of digital data. The signal which uses the signal which uses various networks, the signal on 
the network link 1120, and the communication interface 1118 has a form of the typical 
subcarrier which carries information. These signals are carried to the computer system 
1100, and carry digital data from the computer system 1100. 

[0085]The computer system 1100 can transmit a message using a network, the network 
link 1120, and the communication interface 1118, and can receive data including a program 
code. In the Internet, when the code of an application program is required, the server 1130 
may be able to transmit it using the Internet 1128, ISP1126, the local network 1122, and 
the communication interface 1118. When the received code receives a code, it can be 
executed by the processor 1104, or can be saved at the memory storage 1110 or other 
nonvolatile storages, and can be executed later. By this method, the computer system 1100 
can acquire application codes in the form of a subcarrier. 

[0086]At present, although the invention is explained based on the special embodiment, it 
is not limited to it. Various change can be made by a person skilled in the art using the 
profits of this indication, without deviating from the pneuma of an invention. Therefore, 
this invention is not restricted to the specific embodiment currently used in order to 
describe this invention, and only by being based on a patent generic claim, it is limited. 
[0087] 

[Effect of the Invention] According to this invention, a framework makes it a positive thing 
to impose required restrictions on the service provided for application according to the 
demanded dynamic construction of mounting like the above. 
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[Brief Description of the Drawings] 

[Drawing li lt is a block diagram showing the whole system concerning one embodiment of 
this invention. 

[Drawing 21 It is a flow chart showing general operation of the whole system of drawing 1 . 
[Drawing 31 It is a detailed block diagram showing one embodiment of this invention. 
[Drawing 41 It is a detailed block diagram showing one embodiment of this invention. 
[Drawing 51 It is a flow chart showing operation of the embodiment of drawing 3 and 
drawing 4 . 

[Drawing 6] It is a flow chart showing operation of the embodiment of drawing 3 and 
drawing 4 . 

[Drawing 71 It is a figure showing the example of the combination of restrictions including 
default configuration and exemption setting out. 

[Drawing 81 It is a flow chart showing operation of one embodiment of the 
GetCryptoPermission method of JCESecurityManager object classes. 

[Drawing 91 It is a flow chart of one embodiment of this invention showing the outline of the 
processing merged into one set of restriction of two or more sets of a rule. 
[Drawing 101 It is a flow chart of one embodiment of this invention showing how to merge 
two or more sets of a rule into one set of restriction. 

[Drawing ll] It is a flow chart of one embodiment of this invention showing how to merge 
two or more sets of a rule into one set of restriction. 

[Drawing 12] It is a flow chart of one embodiment of this invention showing how to examine 
the legitimacy of the digital signature verification mechanism which is not trusted. 
[Drawing 131 It is a flow chart of one embodiment of this invention showing how to examine 
the legitimacy of the arbitrary mechanisms which are not trusted. 

[Drawing 141 It is a hardware block diagram of the computer system which this invention 
mounts. 
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ztit z t zm^i-fh^frzmi-t&imt . 



fcSM2 3fciB8tf>2!S. 

[SM2 6 3 me&KMiRtf. mt^mm*-?- 

s-'U ZZirh®i>$lfim&imZfiilil-t&ztiz£ 

0. ® h i> <75T£> I. if 2 3 £i£«tf)J£g„ 

mi&LtzTTv^-i' Bvimixx-h&frzmsrt-htz 

^-is*>zmm-&m.mmzffittc:=ii$zm2 7izR 
*im%mftX'h^x. tn&&**«. lxiatgOTm-t: 

*»h fcAfc. HufBft^r^«ra-rs «fc a . ixj± 

[lt^3S3 0 ] HOiefFiirJi, «BW»Wr y hj^ftt 
JS2 9fcE««)3>t*-^IB»W0^r«l«r**. 

[»*Ji3 1 ] lKrHTr'j^-^aytc^-x^ntrv^ 
rnmmwmizm^x. mmmm<-tz£o. 1 

s^u *z&t?&i>®#>mmwit:tbiii-*&zktz£ 

mrfsfwa*. ±x^^rtm^x'hh-h^i)^^m- 
frieitw^T *&£-?m-*sx-bh t rtpmo&t 

X. mSMWfmWW&^cvX'hhZknl&MZRlB. 
-fSJ:?. lX««R^7u-b-y»f^iW^5*SiSr^ 
Sr«l^^if*Ja2 9tfBa<oayt J .-^^JR0 
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[is*«3 4] mm^umthXo. ixti?g& 

m*im®^& X o » 1 XtiSS^T-o-fe -y^iS^ 
J: o . l X\mWL<n>7u± vttimmtZtt 

[»*JB3 5] mmmzm< x a » lXJiS&^r 

o-b y-^J-iW^-frS we*^a». 

Wirrsid. lXfi«&<D7*o-b.y-9-£|Jift£$-£Sffr 

m<x?. i x<±it i&oru-b vv-*wmz-*ti++ 

t, ^«l^^i»*^34tIB«^3yb- J .-^AlR'9 

[ts*JB3 6] m9m$}£m<xo. ixiimsw-7 
mm-t h x o . i xjiMScoro-b > y »f£$-<2-&ift 

S^fflS^S «t d . 1 X«i»9Tu-b -yfrfclMtsS-fr 
Stfr^fc. £<f;i*f»3<Jf3 4tcK»?)3>"b- J .-?gf 

m-^Xo. lX»2^lfcorn*.y^£»fl=$tf§ift4i- 
X o . 1 X(i?ggc?37*o-b Iffcl&frStfilMMM* 



i,zm^xmmmm<xo. ixi±M«rnt7 

SixS C t Zm^-tl *^*^WBrr 6 J: a . 1 X«i1g 

tmssmmtf. mimmizmmfenmmmtfmsk 
zti&ztt:¥f-5iL%^t<7>v\mizmix. wsmmcr> 

■t /hlZTt-tX-t&Xo. lX<±SS^ro-tr-y-9-$r 

mmmmmizm^xm§smmm< x a . 1 x«±« 

[H««4 0 ] fttEftfeMStf. «&c7)ifei&je£v- 

WfrT J: 3 . 1 Xiilt&WTn 

TV b yWWtiX'b&frimWrt&tiMza-H, 
■ X?y7Zm&t&Xo, lXti^^ro-fe-y^$r 

hm-*itf$>&i)^fr£wm-h x a . 1 xi^ro 

2rl2iE-r4 J: 3 . 1 Xti^cOTob vVZmWZ^h 

^^mzmitzm^4 1 caKon^ta-^^ 

[0001] 

xAtcWL, mz, Tyj-r-i/Byizxvmxztitz 
v-vxn^izm^zmmz&fethtzfrcnimizm 

[0002] 

3* «j x a £ tr ^ v b* j. - 9 /o ^ 7 a * { i r r y 

-^3^coiiai$r«SiJU. *fr£\zX->X\mtiLLX% 

tz. mimmtLx. -^b'v haoh^Bt^ts-ffl^ 
^^Ati«ia!T-^^v> (jg^Brti^oftstir^a-y 
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ffl&ffitlefflttZte. ■ XX 7 U- (key escrow), df 
- • U^AU— (key recovery) fci^- • ^4 — 7- 
>?(key weakening) TD;/? AcOSM 

«*Hi , smimti XTS&mmmfimcoT r y t- x 9 

y#&<0H$£*£<LT, TT'JT-S'HJ'iZMK^tt 
£i«tf>& (d5£<0«g®T-?W^fc<£ffl-f&) <I fc£ 

[0003] 

mm § tth fSfZ'iz* < , «§^trt^ v xa £ nfg^ 

ffl LT V^l. 7* 0^7 A£2t LT 4 y 9 - 7 ^ -i x £ If-? 

A^yx&uaftL&vvp. s^itr/^^x^m^ 

—i>?7-- J ?<r)m<r>\^&i])Vyir)V—T^ nuT)W<r> 

^Oi/X^AXItS^Java PlatformCOJava Cr 
yptography Extension-C£>S . 7 U— AV- ?#*Bf 

-co^tti, i&aia t T§£,I:3fc-r£tc«. 71/- 

[0004] 

m&zimsix. «§^{t/m.^mm*t'&-£tt ( l*> 
*X(iil[Tr y 3 yizit Lx$&ztiz>-w<7)m 

T7V7-- : y3y. m&T- t'xcO-tSWrm «t V 
y Is- A <7-? Zffiz. h i"Xr-A>ftX'$m%1\X . 

[0005] ryv-y-zsayfrh 
w&r-vxvmm. tzbtim^mitr/^vx^ 

«0H^c0S*SrSttlXS. ZtilzttfcLX. 71/-A7 
mH77°0>y-i'3ylz-$-i_btitc?f*J 



wh&^frzmmt&ztiizx'). znfflmzvife 
* yhzm<tz#>izz<?>ff-zi£9m-th. -msmmz 

ft&t, 7i/-A-7-^»4. ^s^titzm&iwm^zm 

y£Mmzmmztiz>v>x\ zorrrvr-i/nymz 

[0006] txtMtztifzmmmmzmnkZixfz 
7i/-Av-^ti. /jx?&itztitzmm : $:7-rv 

-tx<r>tzMztix?M\L%1xrz^ZW&nv : tt>-t. 
tixfAfaZtrtzmMiz^ fflfttttitm-t&tifrcr) 
MRU IS y 9 i)m*-&£1xX \,^<7)X\ TrO^-i^a 

tixf^fcziitzmi&ftw-t'xzm&L. mmiz 

Mmm'aLtilxhztiztch. z<7>£oiz*x?^tt.Z 

tvrz9&&>mm:mmiz£'>x. yu-Av-rv. r 
a yiztt LxmrnztLZir-tAtzizmtcM 
mzmthzttfx-zh. 

[0007] 

imfommoBmi muz. ^mcommmm^i-y 

^HiJiltV^i/XfAl OOc7)7'o /^0Sr^-r. 
ZCO-yXTA. 1 0 OtZli. 1 i tziitmcoTTOl— i" 
3 yi04> 1 ZtcimWW-H&MKZm 106, j|« 
Zlxtcfflmco-tv b 1 08i5±^l«3y^-*yh 
f%<r>ttZftmZFimi l zftotz#>(Dyu-&'7-7 1 o 2 
Wtttih. 7TV7-—>3yi 04*«, -*r-t'xcon 
mZyv-h.v-7 i 0 2(cg*L, ^tut?.. 

T, 77'Jt--/ 3 y 1 0 4i±, #l«77'j7--ya 
yXJiTo^^A-CJ: < , Java771/'y K Jav 
a77'J a/ 3 VtJ il^*-f r 7C3W^/^n 
tzTyVT'-i'ay (Zti^zmfeZti*^) =5rt'5r-& 

[0008] rru ^a^i 0 4«, m^y^- 
i o 2(cs*-rs^, %iumts9m?)tz#> 

3 yi04{i TBlowfishj Bf^-fbT^^yXA^H^?: 
g^T'^e. CiXtCitJELT, 71/-A7-?102 

S^^ajtT^STTy^-i/syi 04ffltC^X 
^A-fb$^, S*-9--b'Xi0^^SrTTy^— >3^ 
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104tCtl«-rS. 7U-A'7-?10 2(;J:o-Cig{ft 

m-&y—t'x<7)%mw$£i\&. mz-t&xoiz. z 

L&tlif. ^UJLt^77'Jt-y3yi04{: 

[0009] -&m:$mi 06«u 7l^-A>7-?l 
02tc rr^^ >^-7x>f^SfL 

OiO-aW^im^ TBlowfishj V§^itTfrzfVX2*$; 

W108, ifcfcliff^Jl 1 0# 

ift>ti%\.\ znizx^x. -imzmmi 0 6*>w 

mifTTV ir-is 3710 4 (Cg«$ixS1?— t'^CCSD 
£6*t4-Ifc£«JE?-4*>U;7P--A!7-7 1 0 2T'& 
ot, HRW&lliSl 0 6Tii&v>. 
[00 10] yXfAl 0 0K&WC. 
102<i. ^fil 0 0<OSJ)^f*:$:ifflg-rsn^ 
-*yhti)S. 7l'-A'7-?l 0 2tf>H&&*5ri&f£ 

02^-f. @2C^L.TV^J; 3 
tC. 7\s—J*.V—9 1 0 2(±. 77^-y 3 yi04 
*^1f^aS<0^-h'X<0Hil (7tfc*.if, BlowfishHf 
#fcT^=f»JXAtf>5S6) c^£S:gttJKI><riK,J;o 
T»f£-f& (20 2) . .TiUrttfSLT. SiJ^*^^ 
£i§^K. 1 0 2ttB*3*lfcaSK(C«& 

Wtmh&mth (204). *%BHc7)-||S|0®t 
iJWT, 7l^-A<7-? 1 0 2(i. t§5g$#ut©JEgl 0 

1 0 4tci2a6^^7t« : ^ri i otiss-rscit^io-r 

t, 7i^-A-7-^ i o 2n^m^mr) . &mm®m 

2«, ami iotmmiosz%&LT-Bim%m>m 

[oo 1 1 ] mm<m£&t. 7u-av-? 102 
m*ztu&m*mbK;imth (206).*% 

W-Vx<r>W&. (tzbz.lt. Biowfishffc-SHbT/L-rfy 

xi±zmm-h-®m:mk 1 0 6 ) s-msg-r 6. rag 

1 0 6 *JL^h Z b lz£^Xffi&Z 

tih .' ztiVMnfrz b . z <?mm-h-wM%m3i 1 

Sft*:IS§St::lfl*3£;i:*x&. Zcr)mfta¥ v 7 li. Z<D 

w&#* mm-tz-^mzmmoeizmztizzb* 



immtm^x v »*^fc t *>*>;b . ss^o -y ? 
wa-f answering 1 0 6{cafflsii*aa«rfw 

mm. axr/mno^ y^^imLx. K*s*irt:sss 

7'J7-yayi 0 4 fHl^S'JfcHfS, 1T&*>*>, S3< 

IHlSilfcSSSHL SfU^S77'J7-y3>10 
4 MzijX? J»itZtltz9mb UT JL& - i: & . 

[0012] Axfj^fcZixtzmmtfmmztxhb . e 

* LT v ^ 77 'J $r- 3 v 1 0 4 (CC <DH§£#S$ft 
h (208) . -£<?)f*. 77'J7-y3Vl OAlfijX 

7J>tt.ztitim8iizy--K:xi : m$m&th . *^.^a 

#ffl*fi£ftTV>£<D-C\ 77'J7-y3yi 04#|g 
(C71^-AV-^ 1 0 2&^eftUBt-*&KA ( %<2: 

mizfflmty-t'xiztuz. htiz x o *,z%h . znitm 

cox olziixfMliilxfigmzmi&ftmthZbK- 
iot. 7k-A7-?10 2*<. 77'J7-ys>'l 

[0013] firifcofBHBte. *»IH<0HR«*WI*« 

izwmth. WFcommx\ *mnt. mnzztt. s« 

3ta6/i{t^ffiffl2ilT v >4 d b Ic&SSftJt V\ 

t±ttz>>i!mco$>&ht>«p&wm<r)V-t'xiznLx , - 

[00 14] H3&tfH4tC» 7V-A7-? 1 0 2O 

1 0 2(i, mi^-^sV- 7Dy'7iy/^>'^ 
-7i-(X (AP I ) 30 2. t-t'^7DAM/- 
^-7i^ (SP I ) 3 0 4 tJi^nT 3 2 0£{f 
iS„ AP I 3 0 2t±„ TTV9-— i/B>\ 0 4^'tt^ 

—gmmiZ&^X. AP I 3 0 2J±Cipher:t7v''i? 
h ^ 3 0 6 hExemptionMechanism^T'xx 7h?y 
A308Zffiz.&. m<r)*Vv\HZM.tr>X. Cipher^ 
T^'x? h^7X30 6liGetInstance^V y Ki:Init 
XV-yFiffitZ. Getlnstance^ V y Kt±, 7*7" »J ^ 

3 y*<-9--t'xo^i$rS*-ri»^^. rry y 
-•/ 3 yi 04(c«t-?-cn*t^ai§nsp<y y Yx-h&. 

ZCOX V >y K^JiJ t tcJtJSLT . Cipher^ T^'x ^ h 
hTTVf- i»3>l 04tCjR?it&. il^^Cipher 
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Ayxfyxte^ Pf^ffiLTV^STTU^-^ayffl^ 
JjXfMtZtl. m&b. Ciphers >X?>Xtf&m-V 
ZhV- t'^l:; 0)®®* fa l h tzihnmftn 
i£/JV\.\h. Cipher 4 yXfyXtf&Ztl&t^ Cipher 
4>X9 VX<T>X V ••/ VtfTTO tr-is a y 1 0 4 IZ J; 

-?*<Init;<y y KT&S. ^^V'yHti. Cipher 4 V 
XfyxZWSHkL. Cipher J yxfyx&mttX'ZZ 
ioCt*, £>t. Init^V -y H(iCipher-f yX?yX 
iZfflftZmz. &tzih<7>Wn o x* y ? t LTilfrrS . Ce 
tlnstance* V -y Vt Inib* V y KtCOV vCtepffltlg 

[0015] -f-CWK^ Lfc i 3 fc, 1 * 
BfcfiSflt (*- • xx/n-, Jf- • y#s<ty-&fctt# 

-. v tfmmztix^&tjte. ig&izx 

ZtlX V . ExemptionMechanism:+7'v*x 7h7 
7A30 8**»fFr&. Ct0i7 5X<i. mf\&\^m&c 
saco^y-yh'^s«-rs. ^ixA>^y>y h'ti. 

-• U*/^J-T'J>l.^. ■ y^Ay-T-o-y? 
Sr£j£-f6> fcftfc, £^»fl-**3lff;£fl*:*>i: 3*> 
y^N*y-Xoy?*-£j££ix*;*» 

** a*>) ^iH-.s^^y'ai AP I 3 0 2 

[0016] s P I 3 0 4(i, ^--t'xrnyN'-f y{z& 
>?-y x-f XZW&LX . t-b'^TnA^ 
c0if-fx|^Sr7l-— 1 0 1{z-r=774 yf 

•§>. ^mico-mimmz&^x . sp 1 304&, # 

AP I 3 0 2*7^x?b?7XK*tJ5frr£SP I 3 0 
4*X>'x:?h;*'7X£fli;i&. AP I 30 

2 cDCipher^TVx 7h^7X3 0 6Cit LT*f J£f& 
SP I 3 0 4<7>CipherSpi*7>'x? r-?5;*.3 1 0** 
-f-LT. AP I 3 0 2 ^Exempt ionMechanism 
:*Xi/x?h?5X3 0 8£ttLT*fj£-?-£SP I 3 0 
4cOExemptionMechanisn6pi5j-y*>^x^ ^5X3 1 2 
tfttE-ft. ZcDlZilCOttmZ. API ?7^30 
6, 3 0 80> V ••/ K£ S P I ?5X3 1 0 .. 3 1 2<D 
* V -y H y t .1 t $r^(C-T S . -I OMS 

tt«B«UcaB*S*l*. S P I Jt~fi?3L. *5X 3 1 
0 1 3 1 2liftt* r^'i 7 b ^ 7Xt A 0 . 7JXIZ 
£r>xmm2ti%l,?tLltt:t>*^XV-v KSr^LTV^ 
i:H^ptC. sJ-X^'x 9 h? =yX SfttfZ tlt><?>X V y K 

10 6 lh-b*xroy\*>f ftfS P I 3 

04?M-X>'x? hfyXCQliZy-yfyXitL. % 



<r)+r77yXI,zSP I ??,x<3£83*tft:.x V y Ktf>£ 

£ft-O^H&W&ll£ll 0 6<i. SPI 3 04£>#X 
y'x^h?7X3 10i:3 1 2tfD1/-X:?5;*t;: : $r&. — 
j&tt&HSl 0 6<7)#^li M3ro*:iIS<o-»r-b*xt> 
H^-C# (fcfcxlf, BlwfishHf^HfcTVl^yXAS:^ 
iSU [SlB#{c, DESBf^fcT/Ur/yXAfclligU * 

s) . -®m*m£i 0 6<?>&«&{°icrffimi>%:imz 

UST'^S. ^ili^T, -iKWSrim 1 0 6 ^©TclS 

SdtfC^S. 7U-A7-?102<O37320 
(±, JCESecurityjj-7'^x^ h?7X3 1 4 tJCESecuri 
tyManager>j-7'v'x^ h^5X3 1 6$rdi..&. 
0-Hife»®(C*>V>-C. Cix^^-X^'x^ h^5^.3 
1 4 i: 3 1 6«/*-yir— S^TS-f hX'h *) . 77'J 
t-ya^l 0 4**i£g?T?-feX-e#3r^. I23(c^ 
ixTV^S «fc 3 JCESecurity? ^XfiGetlmpM V y H 
2:1® X. . JCESecuri tyManager^ 7 X\ JGetCryptoPermiss 
ion^V-y K$r<lx&. ;ft^V»m, Cipher? 
3X306 <7)GetInstancep< V ■•/ HcOD* l/iii L<Dt£%b 
LXWV&Zti. tS«LT. fiX9M\L^iXfzmm<om 

ct<s»-c#s. ftix. mz. m\(ry£x*nmzm 
mt&tiMz^ m5Rifm6cr>$itimx'i'Xr-i*<7)£x 

[00 17] 77'J7-^3yi 04«i. Ztl-t)*&fe<7) 
BS^V-t'XCOmmZ'J&mtLX^&tSr&tZ. CipherJi- 
T'v'x ^h^7X306 COGetlnstance;* y y H lift/ 

Try ^-i^ a y*'HJIS-S*LTV%?,-9'-b'^c7)ifl» 

WSJi, ^ t xtfBlowf ishO J: 3 STBrnHbT^rf y 

& . Ci pher? 5X3 0 6iiZ <?m$.* SftlX 0 
(404), Getlnstance^ V -y r-'^Sg$:D?tf{iJ-r. 
CntJtlC L"C. Getlnstance^y y Hti. JCESecurity 
^7X31 4(^)GetImpl^y y HSrlIff*aii". Getlrapl* 
y -y r-'{±. ^<OMS^ilSg$:llff-r h . i CO^ y -y H 
ti. t-f, S^$ix7caJIc7)-9--b'x^^L-CV^- 
ffitfemgi 1 0 6 *-«ffl^*»t' 0 *«t5 ( 4 0 
8) . tzttii. -ffi.mtc%gk 1 0 6 ffHvfftjtofelow 
f ishBf^-^r^y XA^ 1^ ^S*»i: 3 *^aiBrr 

1 0 6**^o*»4,^*»o7t« 
£\ Getlnstance^ V >y HtCX?— ^ •yb-xjrill 

(4 12) . nt/tHLx^hryv-fr-^ayi 

0 4tx5-^ >yb-^2riR-f. *C. S*?^^- 
b'X^^LTV^--gW^li^ 1 0 6**g.o*>o*:i§ 
^ Getlmpl^ y -y H(i. 1.0*^^-*gfi<»^ll5l* { i2 
E$ft"C^S*»t'a*WCf4fr-r«. (416).u<0 
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[0018] Getlmpl;* V y K#*<0— ®W2rH^#Ig 
E$itT^£^fc¥<li!TL*:i§-£\ g;fcSilT^6-F-b' 
X#?r;L6HRff>3:fl§£l 0 eifimzttLtc^frZo 
1}^m-Th (420). ffifcHRWfcflK 1 0 6 
b&V^S^ Getlmpl^ V y HliGetlnstance^ V y H(C 
X7-^-y-b-xS:j5L (4 24) . <Kfc. BftftBLT 
^ST/'J^-ya^l 0 4(CX7-^ yfe-> ; $-jg 

-r. ss^iiTv^-^-t'^^ms-aiw^i^i o 

6&mztf&?h1$&. Getlmpl;* y-y Hli. XH4 1 

*». b'xaq?*. SIZES ft*!-HRW=5r91 

§11 0 6*«t^v^i:WBr§#i.-&^-C'^<. 
[0019] S^^ilJt^-b'XcOlgESfl^-HRW^ 
HSU 0 6 (^<7)|^(iMa-rsSlgtiif(m-S.^i:(c 
&••?>) * { ^.oA^7t%&, Getlmpl^y-y HJiWji-^?, 
H^Sr-fyxry-yx-ftLT ( 4 2 8 ) H&tfM yx:?y 
X (-T^^CipherSP M >-X^VX) S-^fejfc-TS. 
-?-<75f&, Getlmpl^V-y F*»*M^*^©H®^H^0>f V 
*?>MzMth^tfh%fr}iofrWm'h (4 3 

2) . *m\<?>--mmmzii^x . ^^jBrti. ^ 

fcixs. yu-2>.7-7tfmfixcommi,zmt>ti&£o 
izm.!nizixx^z>i§&. mmwn&amztv*wc^ 
mmiMx.^^i^. — nr, 7i/-A7-^ 102 
tm^-^m^^oxoiz^^fix^h^, mm. 

[0020] mmcoj yxfyxiztot $>ti&®mzm 

mthtdhlZ (436) , Getlmpl;* y >y FfiJCESecuri 
tyManager:? 7^ 3 16 cOGetCryptoPermission;* V y H 
^X/tii-t <. GetCryptoPermission^ V -y KcOfiS&fc 
fi&i, «££*lfcWIRl 0 8i;. t>LS>*Uf. Pflflfil, 
T^§77D^-y3 yi 0 4tl2^^>fl^S : «ri 10 
i&WSU »J^-b yh?:^<c:fC*l». 
<9-fc«y l^GetCryptoPennission;* V >y KtCJ: oTGetlm 

^S^HtT^OjiLSt (RC 5^ri:<7)T^^'JXA^ 
S) ^ri:*eomoA-c7)Bt^yN-7P<-^*^*^S. Getlmp 
1* V y Ktt. C<9iliiJ#£SWRS t . &Bfcfl&ff#<r<0 
©I^-C-ti^ixTV^A^'o^BrrS (440) . 

^sratffci&rtT^sfiTv^^. Getimpi* 

[0021] L*>U *H««a*»j£3*UO^*£\ 



Getlmpl.* V -y PltiKS^ftlMMf^ yX 

^t-c^jfc-rs, *m*r>-mimmzi$^x . .iti 

(i, ExemptionMechanism?:7X3 0 8 cOGet Instanced 
y y H SrDftXai L, MSrft*. 6 Z b izi. -> 

X&8.Z1X&. CCODfl^ajLtCWLTExeiiiptionMechani 
sm? 5X 3 0 8?)GetInstance;>c V y Ffi. JCESecurity 
75X3 1 4cOGetImpl^y y K £B¥l/it}"t" (.KOOftf 
HiUi. GeUvl^y?K*>&2aoftfttiU:%*££: 
fc&SSftfclO . ZillZft&LX . Getlmpl^y-y H 

umfeztitz&mmffiimm lx v^wtsfcHRwa* 

§£1 0 6£&S?iU -eoH&W&llill 0 6£'^yX:y' 
yx-fkL'C (444) » ExemptionMechanismSpi-Y yx 
:?yx££j£-r&. ^tfOfi % Getlmpl^y-y F(±Ex«npti 
onMechanismSpi -i VX -9 yX$rExemptionMechanism? *j 
X 3 0 8<0GetInstance^ V y KtCjg^- ( .IfUi. Getlm 
Pi ^ y >y H com 2 «0Df ft L*> coajfT'fc ) . 
[0022] ExemptionMechanism^ 5X 3 0 8<0 

Getlnstance.* V -y Kii, ExemptionMechanism^ 7^ 3 
0Scr>n>XY"7??*mf\&l,. Getlmpl p< V y H*> 
<^>^$fL/iExeiiiptionMechanisn6pi^ >X^>-X€r3>- 

^<iExemptionMechanism^7X3 0 8$r-f VX^^X-fk 
LT. ExemptionMechanism-f yX^VX^MtS. i>: 

3yxh5^?li. ExemptionMechanismSpi^f yx 
^yxtrExemptionMechanisni'f >"X^ yxrttC^T-b/U 
-ft-fS. Znmz. nyxhy??\i. ExemptionMecha 
nism'f yx^yx<0> V y H^rExemptionMechanisnfipi 

>f ^x^yxcoMlS-r'S^y -y Htv-ytry^S. * 

^KBO— Hli^®lC*5V^T. ExemptionMechanism-f i^X 
?>-XCOInit.xy y H* s ExemptionMechanismSpi'f yx 
^✓-XCOEnginelnit^ V y HtCV >y tfy^"$fl. GenExe 
mptionBlob.* V y K*iEngineGenExeuiptionBlob^< y y K 
(C"7-yb*V^$fL^>. dcOV-yb-y^Ji:. ExemptionMec 
hanism-^ VX?VX<r>* y -y H^ODfl^ai L#*Exemptio 
nMechanismSpi^f VX^yX<?)iELV^ V y H(Cj*^>iX 
!>J:d{;-fS. ExemptionMechanismSpi-O-X^y-X*^ 
xemptionMechanism^f yx^ VX^AZftT J z}V^C^i\.h 
ExemptionMechanism-f yX^yXCO^f yX^y-X-fk 

[0023] Getlmpl^y y HJSCipher^ 5X 

3 0 6cOGetInstance^y -y HtCSO ( Ztllt. Getlmpl 
^ y y H<7)m 1 WDft/ai t*»A><0^§TJ>S ) , Getlns 
tance> y -y h* t , |^0-f V X 9 V X . flJ^Ob y 

*5J:1^.( t L$>iX{f ) ExemptionMechanism^f yx^ 
yx$-iSfit-rs„ MC, Cipher^ 5X3 0 6 COGetlnsta 
nce^y -yKJi. Cipher?7X3 0 6<7)3yx h^^^ 
SrOft^tb L . 3 yx h 5 ? ^tcGetlmpl ^ V y F*> <b§ 
ttffi^^gtfo^yx^yx. fci^ 

( t LJ>il(f ) ExemptionMechanism'f VX? yx$rjg 
■T. i*tfc*fBUT. nyxh^^^Ji. Cipher^ 5X 
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306£4 yxfyxft, (4 48) LT. Cipher^ yx 

yx?yx. mm<r>*z -, K ti£V < t LhiUi ) Exem 
ptionMechanism-f yx? yXZCipberj yx^y^rtC 
^r-lr/MfrrS (452).OiO> Cipher-f XX* y 

4 yxfy x£CipheM yx^yxic^r-feMfc-f &i§ 

3yxh5? ^tiCipher'f y^^VX^ V y H 
inm-h$m<n>4 yx?yx*v-y viz-? yvy?-r 
5. ^Hjo-HS^Stcij^-C, Cipher yxfyx 
<r)\mt* V y Hi^'f yx^yxcOEnginelnit^ 
y7Ht?7t>'m. Updated V y H{4. EngineUp 
date* V y ntC"? y h'y^ix, DoFinal* y y h'lj, E 
ngineDoFinal^y >y Ffc-7-y try^SftS. d«0?7 tf 
y^Ji, cipher-f yx?yxcr>* y y H-N^Bf t/aj Lit 
J£L\^mm<r>4 yx?yxco*v y KlciH^*^ X o lz 
-th . ztit>cr>* y -y r-'CD||g#ggg</M vx* yxiz 

mtf&T-r&b. nyXYv99\t. Cipher^7X30 
6<£>GetInstance.*y y KICKS. <£(C, GetlnstanccX 

v-y^imx/tHLz^iTro-y—^ayi 04(;M 

0, TT'J^-v-ayi 0 4^SfL<«^?iX^Cipher 
*yx9yx*&m$h (456). *<7>f£. nft/ajL 
T^arruy— i^a^i 0 4J4. cipherer yxfyx 
y y Y ^Wfemf&tZ. fc#T'£ s . 

[0024] *%w<o-mmBBizi5\^x , uftxm lt 

V^mfy-v-gVl 04#Cipher-f yx^yxfcuf 
l/ai-T'i^^ab'&eiJJ^ y y HO l lint* y y 
HT'Ai>. d^&kL Cipher^ yx? yXCOtffflikZ 
ffV\ il^i&^ffltClnitpf y -y H^fii^-S. 
y -y KSr^aiL-C^St^t. Bfl^ffi tTV^TTU 

^->-Hyi04Ji. wmc^yx—rn^-v h*W& 
*%,w<r)-mimmiz&^x , dntw^^- 

[0025] Init* y y )<a t Dftfa}3*lfc*£K:s Init 
^y>y Htt. mf&LX^hTTV'lr-i'ayi 04C 
<t oTS^iTJt^KWf^^ t Cipher^ yx^ yx 

^*«M»&oV''^rt'4fca-e*uaT«)«^. init^y y k 

titJW^N'^^-^^H^O-^ yX^yXCOEnginelnit 

* y y fk«l-c , mme>4 yx-?yx&mMtx'% h 
j 3 mmtMyxfyxtfmstt.ztittk. a 

t,z. vt^it/m.mt(ommmff-r^>tzMz. cipher^ 

yx 9 yXOUpdate* V y F fcDoFinal * V «y F £ % 
VitiLX^hTTV-lr-i,*, y\ 0 4 J; oTOft^m^Cl 



77'J ^-y a y 1 0 4 tc«J: ->xm%1xhWmV*>y * 

&4te(=tt. Initxy y FtftflgHb^^-^SrlllgcD 
yx? y XtfiEnginelni tj< y -y H^SSti^V^J: 3 

•rs. -ewcioT. ng^yx^yx. -ttc*>*>. 

Civherjyx?yx$:matt.L%^£ol l ZT&. Cipher 

^yx^y^'Wkmv^, cipher^ yx^y 

tt^ZtizX^X. Init^y-y HJi, ^WtCipher 

<i yxfyxzmftX'Ztc^iioi.zth. z<r>^mx\ 
iniw/ y Htt. ^r-fe/Hksn^^H^O'f >-x 
^ yxtcii-iir^n-?. c: fc ijmiz^-htm d y'7?a 

[0026] ExemptionMechanism-'f yx^yx* J Cipher 
■1 yx?yxftlz*j7°-bj\s{kZ1x&igr&i l z^ Cipher^ 7 
X3 0 6OInit^cy y Kti. iUniO^&llff-rS . 
0®|g(4. ExemptionMechanism-^ XX^>-Xj^m;^- 
-y'ayi 0 4{c«t-?TIEL<i^U f ai$^ r-^<0Bf 

tibz.it. fmmrntf*-- vz'vj-vmsiz 

(4, -r— ■? <7)V&^rik£'fi 0 tftliZ. ExemptionMechanism^f 
yXfyxZWlf&LX. 4f- • WA''J-^D7?J 
^ISL. «#-f^^* J $>&. ^S'SrlS^ExemptionM 
echanism-f yXfyXlZX-oXMftZtltzZ bZMMlZ 
-t&tztbliZ. Init^y y Kti. ExemptionMechanism'f y 
X? yXOIsCryptoAl lowed^ V y Y^X/tHt. 
BflcT)— HJfe^ffitCiJV^T, ExemptionMechanism-^ yX9 
yx\t. -?-<?)GenExemptionBlob^ V y Ffi^TftiiZtlfc 
b' 0 MZH ^XHmZ ZOWzQSm LX\^h ( Exempt 
ionMechanism4 yx?yx{4, ^S^^feK^^iftff^* 
*rr$fi-5.7c{c=Sr^TV>S) . Cicoffl^fi. IsCryptoAl 
lowed^ y >y b-5rB?lXaiLTr^-feXT*# CWIsCry 
ptoAllo«edj><y>y H*s, ^^rift^Uff (f^ 
t>*>. GenExemptionBlob^y y KsWl/ffflSn/i ) Ci: 
$r*LTV^|>%^, Init^y y HtiH^fO-f 
X. -t^hiy. Cipher j yx?yxtfffiWtX'£&io 

iz-r&. &wj:mft&m¥fzixx\,^^m&it. imt* 

y -y F&lDJMtt 1 ?* ^^J: 5 ff40"e. Cipher^ y 
x^yx{4t6f^T'#=5rv>J:d^^. la!oT. Init^y 

[ 0 0 2 7 ] BU3*LJt <fc 3 -?-il(4. Cipher^ >-X^ 
vxtc J: o Tffi«$it-I.^- t'xiztnz. bti&mmm 

Br^"SJCESecurityManager^7X3 1 6 cOGetCryptoPer 
mission^ y-yh'T'* h . Ztlt><?>®im±. t&ZZtltl 
$fJRBl0 8fc, i>L$>tH£. vfV&LX^&TWlr- 
is 3 y 1 0 4 iclga^J-utfr^T 1 1 0 t£-?uT#i5g£ 

fxS. GetCryptoPenoission^ V y K<D— HS6?^®$-<J: 
cO£T£nftlc3J!?-f $JRR1 0 8fcfr^Tl 1 
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[0028] *&w<o-$mBmizt5^x % MR l 0 8 

fix v ^^-tBg^-fkr/P^ 'J xmz tut hiim<r>h 
hmmm&ffizth. *lx. juttjgci*. 
IfttW&hx vit^dtdt^ftrAcr "J XAtcflnAft 

ft. *%pj\<r>-mmmizii^x . m^o*jrb*±, a 

[0029] SORBOSE ( f7 Mftjgifctiftlft 
IS^Mi, oifc^teimii^xyMja^tfjfcSft 
ft. £xyMHc:{i. ^^Bf^-fcT^rfyXAi:. -e 
OT/i^'JXAKinx. £*ift$o*H0ilii»*g5g-f ft. 
Wfcit5§^xy MJUtH t«Jt* LT^ft. 

ft. 

( 1 ) vmsTA'd-UX^&i^liKgiHF' 

(2) ftfefflf«&fcttR8!l? 

( 3 ) ft*£t£. 

(4 ) nff zixzm^cM8fcm*)ML&%z<DZ(Dm<7) 

[0030] ^BBOBW^^WC xy h imtVU 

^^+(c^r-fe;l-ffc^ii3t^^ffi[$gS:^oT^ft 
*7=J*?hbLXmmX'Z&L. &^>bV*7T4 
/H^^f-^Xh^ffl^^fc-rs^tfC^ft. IEL 

5SiflMT'£ft. 

[ 0 0 3 1 ] 07 tcMI®^T7 *n-M£5Efc&|$f£?£c7) 

$rJi^-Tft3i:^a^rft. f7*;PMS®iMii 

*«>2rfgS-rftOT\ ^<0«tpt^rft. 
[0032] »«f7 S> 
ft. #xybij|i, ftfecom^itTtl'lVX 

Mz-?^x<7>eckm^'u*-?zmLx^&. 

T, 07<Oi3KBlowfishT/^DXATii. 128b' 
7h^)MiI*5tffl?fl5. PWMC, RC5T/WJ 
XAT-(±. 6 4t'7h<7)fc*;i^ 1 0 |I]<7)Bf^<7>fc*; 
t*9iIL&#ffiJB;Silft. ^gS<7)»S?t,Ji{ar|^tj: 
dfcf3#T'£>ft. «ig^liyh'J 
<i» U^^^'J-^E^tSfii^lowfishT^UXA 

56b'7htr^ftC:tSr^L.T^ft. HflMc. 121 
^hUtt*- • xx?o-Mfc*8ft^lo«fishT/U:f U 



x^tmzmmzixx^&igr&iz. &m%zmuz-£ 

T256h*7 h^-e^ftdhSr^L-CV^ft. 
<±, |SItr;Ud-'JXA^ (,T<7)l§-£J±Blowfish) 
c7)xyh'j(c|Sj*T'&ftc:fclca«$tiJtv>. ztit><7) 
xy h y fcJBJM- ftfc&lS«##l3r;h.<f . H tT/l^'J 
XA^$:ie^-C'#ft. 

[0033] mm%tl&®m 1 0 8fct Cipher 4 yx? 

yxlcflnx. <o^ft^tfO^-C#«$ixftH^)-a(i 
jSr^rvn tdiocoH^Ji. oft^ffiLT^ ft TXU^ 
-i^aVl 04fclg^ft*:fr*n 1 0#i L«fft 
ttflli **ifc"C&4. JafUcRSJJUrJ-dfc:, fci: 

a^wx'j^-^a ttwryj-r-issyizit 
«.xm mzfmmztiimx'i* ft . mmmmt &mmm 

cory'V-!r-^3>^(Dm<r>Ty'U'>--^ a yX\ 3£ 

6#ufelWri 1 OfcRBfcSixft. *^<o-HSfi0®(c 
fcwC, ft*Tl 1 0li«&cDi^c0d*><7)lo£]lXft. 
1 #@OJg^(iCryptoAl IPermission'tf ^-Cfeft . 77 
K 2 r — a V^CryptoAl lPermissionSr-^-i. t>tlX l^ft 

W^t^ftT^ftClfctcSrft. WV^^fti:, TX'J 

T'#ft©sco«pnr&BrtgicL, «ot, «s<4^rx 

'J^-^-aytcfgtfj^ilft. 

[0 0 34] TTV lr-is a yiZi&b^ilZ zii£*)i> 

UXA^ Blowfish) fcfft^A'?^- 

9<7M^h^ (Ktttt. %ckm¥k) JS^ft. ft 

o^;^-. Bf^-ftT^rr»JXA(iffiSc7)U^T-HS$ 

tiM& TiwjXAumtostiW) . - 

<T)X OlZ. ¥f*ITl 2 8b* y homm&tmzMovfi 
shj&'^SaTV^ft^, 77'J7-^3yiil28h' 
•y hWft^aftT-BlowfishHf^'fbr/U^UXASriSMT- 
f?ft. ^-CBlowfish^Jg^Sn-CV^Tt'ttcT)^-. T 
X'J y—> a >ltm?)&Z tSflRB^il-ftCBloMfishBt^- 

^r/Wd-'JXASrffifflt-^ft. c:ni-c\ ft^/^^<- 

^iCOV^TJi. ft^JI^'ft^UifiaL^. ft^N'7^- 

tf^t*>'T-#ft^ttca»r^^-c-^ft. ^c^id^sii 

RC5%t'<?)V8mtT}mjX2*&m 
X-r&ZthX'Z. LtiW^X. WckJ*7X-?<7>Wz 
■&SbhZtl>X'£&. 

[0035] mz. 77'J ^-^ a ><,zmt> t,tlZ>tii<r> 

it^r*i. &feom^itT>i>Jvxj± ^tta. Bio«fi 
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^JS^(S]±$-t+l. . ffWI9g^»Ji5B 1 0 8<*>rt«K: 
a Vtt. a»*>ilF»r£Btf>4>*i.4 - 1 1 "TUT** -fc 

[ 0 0 3 6 ] <Kfcs .TO J: a %ffl5tmm*7tlZ. H8tf> 
$UhMlz£~>X. JCESecurityManageri7 5X3 1 6<7)Ge 
tCryptoPennission^ V y V nmfclZ^X^XWffit Z> . G 
etCryptoPermission^ V -y KJ4. **U& t OfU r ifJ$*lfc*§ 

^£ftTV^l£^fc7vW=fyXA=& (tzkUi. Blowfi 
sh) fc^t^^-X-^O-fc-y r-£gftIXS. Bft/JiJUlC 
ttJ&LT. GetCryptoPermission^ V y £~?. Df 
X/mLX^hTTV-y-^s VI 04€r^-t§ (60 
4 ) . "f"^^*). GetCryptoPermission^V -y Kt±. Get 
CryptoPermission* V y H^'Bft/ttJSixSSatC^o^ 
Getlnstance* V y F£Dftf ft LWJ^-ya^l 
0 4£*fcig-f£. *^«-^ife^®t*5V^T, GetCry 
ptoPermission* V y Ft4. Z<r>&fe$:a—)V • y 
^&»fflt^ltri.Ci:^J:- 5 -Cfi : 3. ZiX\i, DflXffi 
LUI^S: h l"— X VX „ GetCryptoPermission* y -y K 
rt^Getlmpl* V y HlcHO , &£GetInstance* V -y V 
izm *) . ftfcGetlnstance;* V -y V Sr*SJfcHf ft LX 
l.»57r i J^-yHyi04tISIt(:J; l 5tT^ z 

crymkcniioi.z. a-iv- a? -ytzmmizmti-zz 

t iZi. ->X* GetCryptoPermission* V -y VtfW&fiP&t 
VtiJ L77U t-y a y 1 O 4 J^t? I, . 
[0 0 3 7] mSlULX^&Ty'Olr-isayi 04tf 

mizzti&b. Dftxtb lt v^rr »j a vi 04 
(608). *%pm-mimmizi5^ 
o 4 tc-^-i. ^iut*>tr a -f&JTf s c: t tiTt)^ 

^r-xsVl 04(cra^-r-S7r'f;PS:?il2L, 

*>tf>ff W^ftX V%S*»if 3 *^l2-r4 £ i: iz 
£->X'ffhtl&. J av a7u7?$>?W%X'li. T 
7Vdr-is 3 >cr)7T-lMZJARyT'<MZ'£tti. 

z<7)jAR7T4)\sZ¥r5i<7)mvMz&m 
[0038] «fe36H08P?r*«jio*»ofc«^ x mt&m 



tffiEgcOTT-y ^-v 3 V 1 0 4 ifV9)\m^ 
ixtcJ AR7r^/^#fttl.. i»fy7/H=Sli 
77U^-y 3 yi 0 4<^ftffi#fISI$ftTfcy, 77 
'J|-y 3 yi 0 4c7)rt§7!i^£;ftXV*£a>oJtC:fc 

-£\ ¥f«llZ$&%)X'fo& . GetCryptoPermissionp< V y K 

[0039] GetCryptoPermission^ V y H**P¥t^£tS t 
T^STT-U^-v-s VI 04^*^^rflF^r?r^TV^ 
^V^fiJBrL^^tC, GetCryptoPermission^y y K 
(i. ©JRR(5Dx7*yPM^^JKti»-^V>TCipher-f V 

x^vx(cini.^>ixS©I*<;^^-rs (6i2).ftft 

GetCryptoPermission^y y F(i, Dft/KLT 
v^STTU ir-is 3 v 1 0 A\,z i. ■oXm%$tlX^&v§ 
^faTA'-d U XA fc H t T/l'd" y XA^COX V h y CO. 

(tztuf. mm&tmnim) t^m^tih, tit 

*.Jf. mf\&l>X^hT7V / r->'3>l 04*^10(^1 
shT/Ud'yXAcoll^^SSLTV^^tC, 
cOi 3 fc. ^{iS^ISft* 4 1 2 8 b' y hOBlowf ishi: 
^rS/i^a„ mmmt-otdk. $OI«;*^etCryptoPenni 
ssion^y -y H(C<J:-3TJCESecurity^5X3 1 4<3GetI 
mpl^< y -y h'tCjg?^ (616). 
[0040] Ig6 0 8(CM-3T . GetCryptoPermissio 
n^< y y H^Wffi LT V TT 0 7- is 3 V 1 0 4 # 
l itzim^comj^ff^n^X^ kWBf 

(C v GetCryptoPermission^ V y Hti> .KX^iOrfnrO 
V^-^fLA^'CryptoAl 1 Permission*^ if o ^Sr^lS'f •!> 
(620) . CryptoAllPennissionC7)*§-£\ T7°V 7— 
>■ a V 1 0 4(i$lJ|5S$fL^rV\ -ec7>*§£\ GetCryptoPer 
mission* y -y ^Jl 5 ;* L<7)J&^S:GetImpl * V -y H 
izmt (624). L*>L. K=nr*>'V^mtCryptoAllP 
ermissionT'Ji'SrV^^-. GetCryptoPermission* V -y H 
«4Ig6 2 8(CJttf. 

[004 1 ] lOI6 2 82-t-*!yi-f&i:. 77'J^-y 
a V 1 0 4 *U &Kim$i<r)1ffl*m*iZft'?X}5 *) . 
ZiXh <7)fr"T#*V t> Cr y ptoAl 1 Perm i ssi onf^ V * Z. 

Mztchztzmm-z. 

i?*>, ^<7>Bf^-(tr/i'^yxAi:K«^e^/N-7*- 
^c7)-fe.y h5r^-rs»a) , itzii. (2)tnx.e>ix 
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[0042] IS 6 2 8t\ GetCryptoPermission^ V 

(632). gf°jtmmx-z &<wi. ¥r*Hzmfeztitz 

h> tzb Hi. T7V tr—is a > 1 0 4 #*Blowf ishT/t- 

B^HfcT/^ 'J X A**Blowf i sh7*/P:f y XA £fg5£ t T 
u& b £ tz 1 oof^tfafflKSrS . *mnco-mteM 
BlZte^Xli. &*im¥rsi*mmZtl&. GetCrypt 
oPermission;* V y Ftf¥f*I<7) 1 -P*^ffltC5rS Cl i: £ 
&/g-r£l§£\ GetCryptoPermission^y -y H(±, fr^T 
fcfl^ $ titz&kJ *y*-f (tLftte-ttitf) lzm~3 
UTCipher-f yx9>MzMtt*Kh®mt:&fef&. 
■f%*>%. Wck't? him^HzmfeZtit: 

fflmmmmz**) . t&wtTfrivxMtm 

ft2tl%\\ MmtfimfeZtlttk. fM**J«*GetCryptoPer 
mission^V y HtCfcoTJCESecurity^ 9X3 1 4<5%e 
tlmpl^y -y HCjKSftS (636) . 
[0043] HI 6 3 2(Cp->T. GetCryptoPennissio 
n* y -y F#. jDi £>*T.£<#&BfMgffi£g;J< L&^lr 

°i<7)^-rtii>i)mmx'Z%^zbz®.mLKt§r&. is 

6 4 0(Cjttf. IS6 4 0T\ GetCryptoPermission^ 
y -y Htt. TTU Ir-is a > 1 0 4 tZ^-Z t>tl*lff*jcr> 

->JtJ§-£\ GetCryptoPermission* V -y KJiSflSftOx:? 
*^ r-S^fcttJH LTCipheM >A?>At,zmi. &ffl&) 
£®5£-t& (644) . MifrSr&srf&Itr&ti. ftftZ) 
IS 6 1 2 (cKiS LT BSm L fc IH t X'h h . «U*tr 
-3*T«L #J#7#GetCryptoPermission^ V -y h'tC: 
ioTGetlnpl^y -y (648) . 

[0044] — 2k 77y^-y 3 yl 0 4(C|a6^>il 

^3?tZ>W®X'foh b . GetCryptoPermission^ V -y H 
IS 6 5 2 tattN IS 6 5 2 
X\ GetCryptoPermission^y -y H(4. flD*. btlZ^ 

mt&mim&thgf^^-rixfrffmmx'Z&fri:? 

fr£&ti£t&. ftflsWCIi, GetCryptoPeriission^y 

x , *<rmfc(r>B§mtT>\szf y xu-mmmn*. -y f 



gllC. GetCryptoPermission^y y Ft4. »JI®<0*(^ 
X%h. 

[004 5] m-£ZtlX^%B§mkT)l>tfO X£.m\o» 

f ishr^d- y xm.X'S> o s rru ^-^ a ^a*. ^2 

( 1 ) Blowfisht^f- • Vl-r—lsrHXV (2) Bl 
owfisht^f- • U^AU — 

[0046] 3^C@7(z^$ftT^&i6gi®cOft|^5e 

ii. ^p— ■ ^•*-^->^'Blowfishi:^C<Sffl$^ 

Sr^^^S'ttotC;. GetCryptoPermission^y -y F* 5 .! 

^IS^^JiBlowf ishcT) 2'>(7)X>' h 'J CI 
*t^tf0X> M»£7)i:-^^>t^a^i: L/C*- • •> -f- 

ffifflT'^SBlowfishtdf— • ^^-^-y^ffi^*? 

[0047] C1C0^^- N GetfryptoPennissioiu* V y H 
Ji, Blorfishfc&tc&fflSii!,*-- !I^U— tKVT 

•r^^. tmwimn^yhvtmiLxxmztih. 

^Hl»i, Blowfishtdf- • U^v\'U-^ti^$iX3tffl^ 

zcr>¥?^tfmmximm*imz*&. m^afr 

-tltZZX'teb^Z:^. GetCryptoPermission^ V y H 

zc?>?mzmmL*\,\ zcomzz'+fomiz. Getc 

ryptoPennission^t y >y H(ifg^$^^®«SrHS 
-rS*S6=5:HRW=5r^l0 6 (04) ^^TS. Z 
<7)9a$&<r)%S7 (652) $.X'I,Z, GetCryptoPermission 

[0048] fFnT^SfflT'^ S CI i: SrGetCryptoPermiss 
ion^< y -y H^^^^'S^o-C GetCryptoPermission^ 
y -y r-'{±. ©JKc7)x7 */l^MS^-CJi:^<^i5«Sr<sl 
mi. Ciphers y^^^tcjo^. 

(656) . ^flsWKtJ. GetCryptoPermission^ V >y 

Z OX y h »J {4 , ^S^«Ofil33<OX X h y -c* 0 . * 
^$f|*«7{4«^«* < 2 5 6 b' y h<0^- • V 
dt^BlowfishT$>S. vl^A>(7)©l|5,^So^» ©J 
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*rJ*<GetCryptoPermission^ V -y KCA oTJCESecurity 
?7X3 14<7)GetInipl^y y FfcigSflS (66 
0) . m&VK±olz, ^^<?)xyhUJi % iiS. 

GetCryptoPermission.* V y KJ±. Cipher^ >X?yx 

[ 0 0 4 9 ] III 6 5 2fc5t-?T. VvfftaftarbflUil 
T'#3rVtf§£\ GetCryptoPermission^V y KJilBMtf) 
Ty*/l>hm&ZfmLX. Cipher^ yX^yXfcflDi 

* (644). Miteaje-*-*** 

<i. IS 6 1 2fcBCtL-CJJETaaWUfc*tttHfC 
ft-5t. 77'jy-y 3 yi04ll 77V -ir- 
is 3 y#lfc »Far*4i *>fi.T Wfrt [SI 
3CaX0ifcMll>. ©I*«J* { ^*^/cf^. ©J^GetCry 
ptoPermissioiu<V y KlC «fc oTGetlmpl^ V y H(Cjg? 

(648) . SJBBL^a<Oj:d(c;, GetCryptoPer 
mission.* V >y KJiCipher-f yxfo&PX ^ftSftJ 

fit&fct*. mj£.w*izmmL£? act. o 

tCioT, GetCryptoPermission^ V -y K(±. Cipher -i 
ZS-tkokS-h. WV^&X&fc. GetCryptoPermissio 

n^y y wtsms^vMrnz-tots: o t-f&. 

COO 5 03 «BBL;fc.J:3te. »1 0 8c7)^-y b- 

(Hi ) *istt®m(07y*>\shWifckMm&±. m 

. ( i ) *BN*ffi&. &£xs ( 2 ) mmm <7u-av- 
? i o 2nmA2ti&m£t:iim&<7imm) 

[005 1] Ztlt><omm<0*:-y Mi. tib^b'CO^ 

m LX 'frhtih . JlttffjWi . 2 -?<oft«f?>-<r y h (iv 
-x'SftTSOm 0 8<7)f£m-fc y r-££l£U V— 5> 
<i. %CT>'i%C=tUz®mi 0 8#2OOft«<y>fcy b<9g 
t©ll<7$^SIISS:-^tfJ:o^ffiT-Slff$ixS. fit 

Ttssofs i o 8tmjj<7)mm<o*: •■/ htftot^* i t £ 

[00 5 2] 09(iv-^S^«Bg5:^LTV^<. 13 

iztjkztix^&xoiz. %mmm&7 o 2&. f?*^ 

h 3 yjK-*y h 7 0 6 fc&Bfcn y#-*y h 7 0 8*> 

£>f8j£$*u>. naic. mm&7 04{i. f7*;^3 

y--K-^yN7 1 0tm3^-*>h7 1 2#^fg 

7 r 7*;l^h3V^-^>h7 0 6t7 1 0 
<i. ^««^HSI$ixTV^V^tHf^{br^r/y 



T . ^3 y#-*y h 7 0 8 7 1 2ti. ffl&mtf 

m&ztix^hm£cr > ®m*n$tth, ^m^y-mm 

&Btzt5\,^x. r^/Pr-ny,*— *yh7 0 6. 7 l 
otftll3y,f-*yh708, 7i2{ifi(c;. mib 
W&LXmtyLtzmm<?> ; r7*>l'YW&.7 \4kfe$m 

^7 1 6tnvm*Lx\^. -tKb-h. 

^y>706. 7 10. 7 08. 7 1212, OttcliZ 
iU3Lh<Oxyh»J*^«j3tSns. Sxyh-yii, JJTF 

( 1 ) *9ft7^=f UXA*4fctiaWF 

( 2 ) ftfiMjHI«&fctt»ro? 
( 3 ) fi*Jg«*i it/ 

( 4 ) <fi^Bf#$(J|S 

[0053] fc^fUfciWISl 1 0 8 %m< ICI4. 7*7 */t^ 
h 3 y^-^y h 7 0 6 1 7 1 0 Srxy M> rt tv- 
v'XT. ^^§©JI?Sl0 8<7)7 ; 7*;Uh^7 14$r 
^Hay^-*>h708fc7i2if 
xyMJrttc-7-^tT. ff^^SSMl 0 8c7)^ 
S^7 1 6£4u£-t&. i«M«3W»*^lfctt, ^#^ix 
^$0©1 0 8t±JCESecurityManager^7^3 1 6<Z)GetC 
ryptoPermission^ V ••/ K£ <fc o-Cffiffl$itT. Cipher 
yx?y*(cflD;L£ftSiffl!t>S:^-f a. 

[00 54] 01 OSl/iai l«7n-fir-h 

mm. mmA. B&xvcz&mvxwiw-tz. mm 
mm) zm-t* ttz. m^cnT-^m^mi- (tit 

i.fcf. %$>tliz#imi 08) . 09tc^L7tJ:-3lc. -r 
7*;uh3y4f-^yh706. 7i0k^3y^- 

*y^708. 712 izmmw-is&ftzmi l-cso 

[0055] $T, II 0OJ: d fc. 
Aco^coxy h 1) ( ^(7)^-l2fi%jc7)xy h »J ) coSS? 
(8 04)*^4&4S. S^t^xyh'Ji:iR«B<7)x 
y b U t £ifc® LT . Jt^-rsx y h >J *<K^B (ciWe 
-f*j&»if^*»*ft5&r* (808) . *^<7)-Hte» 
»{:*>viT. ;«tl StRSitJtxyb'JWT/Wa' 
U xa^*> i if m«ffl« , b ct)x y b y <r>7>v 
j'yxA^tJiz/^isig^fc^jtteLTff^s. r 
m B cox. y r- y cis] izmonv d y t &Bfc&li<7> 
S^i5-ti:*«-rSi:. -e^xy h y*^J5-fSxy 
byfc&6. 2oc7)MJEt-2.xyfycr)©J 
IS^JtK^ixT. fit^^^«ll?8$:^-r-S» (8 2 
0) . 

[0056] Zco-%m<r>Mk LX . iS^Ai: B<0M^ 
T/Prf yXA**«RC 5 ^^1i* l '# : i£L^v%xy 

hyS-#^.-S. 4?t. ®cmAcoxyhy<7)fi^R* J 6 
4h' yh. ft^OjgL^l 2. iSmBtoxyhy^ 
fi^a«*U2 8t'yh. ScmrML®tfl0bt 
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[0057] ©t©Jf«J?il^$(|RS3&>'^ o*f£, frU^ 
xyh y^TgcfgCK^uSSitS (824) . ZOML^ 

h »; fcli. Zcrfflmt LX . X&8 2 0 Tm^^tlfz& 

i>m&ztuzmmim&?& . fr u *x y y 

RSRAldfUiLhxy h y #?R£-f & 
frb' o &<V¥>mW%ZtlZ> ( 8 2 8 ) . x.y h V 
■tzm^z^ jaji£Xfi8 0 4KMLTs mtAV><X 

m&izu. !m*JM8 3 2{zmt>&. 

[0058] X*I8 0 8^Mr>T. J£SgAT'iiifRL*:X 

y izKiB-t&xyh vtftmBizttLK^tmm 
L^^b'ot^mm^^ti^ (812). zvvj 

vxmm-h. v4)vv*)-vtm@iv>i l z%r>frhtf:fr 

>MiR£to:xyby«^a>irpr&. 
Cfc<i, SrU^xyby#£j£$ix-f, saa(±. RSIA 

h y £8STf I>£a6(;:xii8 2 8^ilO. 
[0 0 5 9] — iaiBC^^f/l-W-HWiyb'J 

#J#£ftttWK6£&lg-r£. (816). zo&m^ x 

ss 2 oiz^xm&LtimwtmtjTmxfthti&. 
Wihv\®i$ixtmmtf®:&~>tzm. ftu^xyhya*® 

$KCfc£j£$fi.g> (824) . -IcofPrLvxyhyfc: 
(±, SS?t^x^h'Jfc|iltT/^yXA^fc^S« 

RBi: L-T, Xg8 1 STfti-jfcatWttSfifcWIBa* 
«rU^xvhy#jfc»CK±j£$*U>i:, 3! 
ttSS?trv^x>-h'JO«iS^T-rS. -eLT. Jg 

4 (828). x.yh'J tftftE? S £14 , MSSrX 
g8 0 4fcHLT. J^A^&^xyf-yfcjMiRU *& 
m-f&. ClOKMJi. iS^A^xyhy^safiiSixS 

[0060] B&BA^x^ h otfomztitzm. mm 

A<ox y h V ic^jCL^rv^SfBco^xy h y zmm-f 
h&lz%h. L*>U Cl^tfdmit-, R^A(c-7^;P 
K#- KOiy h y 5 ( 8 

32) . B^A*f7-Y;PH^-HOxy h!J&ftoTV* 
iR^BcojSfjncox^hUJi, -efx^tfJ&SRC 
icffrftSiT-SilJo^xy h y k tt«f v^o-c. Z 



rnHmmj-r* (836). 

[006 1]—*. iS^AtCVf^H^-KOxyh'J 

tf&tEthtwS. mmB<omma. RSgBco&^xyh 
y ( zcrng-sumuw^y h y ) aaHto>6tt* h ( 8 

40) . ^L^xyh'JkKMC^x^hUtJ-it® 
LT\ ifJE-rsxyh u*Wc^ffqtrs^ifd*^ 
WBr-TS (844) . *^0-HSSJg®(;*3^T. Z 
<0&Sg{4. M.iRZtitixyh<J<?)TfU*VXI»%i5J:V 

fmmsz,. %t>mzjmc<7)jiyhvcr>T)v>Jvxj* 
nm-th^yv)i]mMci,z^i)^tz^. mm 

Zixtcny h V li, &mA<7>x.y b U <7)!m<7>- L 
SS?LTV^x>-h>;coJ!ia$r^t L=5rv>. L 

x . jaa^xg8 5 6 ^cil^T-^?c*B h y s> 

[0062] ^tR^ix^x^MI^TftSSCOV^ 

h V co®\mtmtiA<w( )Vbti— b<r>x.y h UcoSJI® 
SriblgLT«t$iJ*<>^ix^Si|llS:^-ri» (848) . 
d^Sii. IS8 2 OKoVvtHfl&Ut^BJifclii] t* 

t^x>hU*^C(c^$il^ (852) . Cicofr 
L ^x y hi) izii. StR$ix^x y h'J k H t T;U^ 'J 

mt^y bOlzii, *<DWmk LTXS8 4 8-C^g 

Ltemmmtitzmmi) i iPtEi-2>ztiz%z,. 
y m» etimtmTH> . * lt . b tcMtcxy h 

'J* 5 ffi3Et-S^fc'3*»$-^-n> (856) . X>-h'J 
tftPCET&WrS. !®mZJ:US4 0lzM.LXimBcr>tt. 

tiy h y * J *&si$fi§ tx-m< . ^x^ h y awis 

fl.2»k, K*CC0fi|^«<^T-r& (86 0) . 

[0063] xmico-gimBiz&^x . wnztuz 

V-xJftatiJCESecurity^ 7X3 140^ - v-A- 
If (CJ:->-Cllff$iX-l>. JCESecurity^7X3 14#Bf 
X/ta^ti^t-t^z. Z(04-y*ry44f\imf\£Zii 

S. -f^A-7-f-tf^DfI/aiStl^^ -i—i/^vl 

if<i, ^f-vA'7'f1flc^fcSiX7t&«c02oJiLJiO-fe 
•yh$-V-^LT. ©JRS^^-fe '/M08 . 
±*$flSC7){iC:«0©J|5g<7)^-fe.y M 08 (-f^^/Ph 

m.%.tfm&%.$:ffi£&) X't>*). ZtUZ. CipheM y 

ion* V y VlfZX r>X %<7>mz®m%1xh . 
[00 64] ffi&l,tzio\Z* JCESecurity^^X3 1 
4^GetIinpl^ V ••/ K^, m&^-&-f&&}%$m 10 6 

eMyxfyxitZ&^LX. 9m<F>4 yx?yx££. 
4yx?yxiwm<7>-'&tLx. Getimpi^ 
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wc. zcommma. Getimpi* y y f**. wjs-rs 

HKW&Hgl 0 6£f2fiEU Wa^SH&W&Hlill 
0 6^7^7-^ 1 022rl2iE-rSt^affiS;i2iE 

im#±t&zb zsimztzizte. ( i ) mm-t s- 

JRWSrllg 1 0 6 <0 J A Ry r 4 iWri'9>vm%>Z 
*U (2) 7U-A7-?10 2«JAR77^/W ! f 
is?)Vm&Z1X. (3) JCESecurity?7.X3 14#. 
re*-f •g.H&W&H^ J AR7r j ( /K0#£c9&tB;: 
ffiffl-C# & ^K^m^^S (obfuscated trusted pu 
bl ic keys) cO-fe -y b Jriltf.aA,-?*) 0 . ( 4 ) ffi&t h 
HKW&HJSl 0 614. 7l/-A7-?^)JAR7T>f 

;u«os^co^sE{cffim-ri.«^raa^-b -y h * 
[0065] znm&ts-z. htix , nmmtf&n x 

olzmffZiXh. JCESecurity?5*3 14KS 

^&titz^Bnm%<m&fflmz&mLx . Getimpi* 

y -y K HaW&lii&O J A R 7 r >f /UOr 5/ 

Getlmpl^ty-y HtS, Mii-rSH&W&ligl 0 

m^mm 1 o e titztm&mmz&m l 

T, y U— A*7 — ?OJ AR7 r 4 )V0)^ri/-9 
tfiM.i~$>. 7WA7-^«JAR7r'(;Wfy?;i' 

hy?9\±3iy-Zmt. ZOStmz^ZtlT^&Xo 

t. mm-z-i&mfcmmi o^ty^-^-? 1 o 

ZixZZblzftZ,. 

[0066] Zcr>^mEHm<r>m^X\ Getlmpl ^ y y F 

*^Bflco-HSfe^®^fc^T, Getlmpl^y>y Fii§£ 
O^aE-ecOtcOJilltfL^^. Getlmpl^y-yH 

T^^;PS«^aE«S^(iJava RuntimeC9§&eSfii(Signa 
ture Mechanism) (;:&•&. .lCD«£&l$i{2£ J a v all 
m>-%rt'b 0 . 7 10 2 <0-gra±& 

^. ft-^T. 7U-A7-7 10 2A^lSi:. ^<0S 
^<St§<± r fl!fflS^j 3ytf-*>F-C1i&^. gift 



[0067] ztujm&mffi&w.MT'Z & «t 0 tc-r 

tf>fc. JCESecurity?7X3 1 4 \Z\±&H:< b i 20C9 
7iS9))^&*Z<r>Wzm>&A,X'hZ>. lollW 

[0 068] SI 2tc^$ixTV^J;dC 

mmffiiz&m-th^ittjvmz, i®m°imztz 

14. Mi?W^f^7m) coj^ (904)*^ 

it. 5^A^*<j>^effl (fzbUi. otc-g:) 
S=&f0lo*^fR§fL§Ci:^«,„ ?yyj*% 

mtmomm (tztt&. it-st) co^-. socog^ 
Lxi>nbti&. vmizmmtifzm&tf±xmtm& 

corns. Xg9 0 4lc«t-otfl!ltOS^*^tR$m». i 

[0069] s^co i o*>-ss;$tt^. miRZtifzm 
t ^m%mm&mmtfmEcofzMzw%mffiizm7* 
?fts (908). mz, w&mmiim&tfmtztifc 

^^^SttJR^il (912), iEaffi^Tllg^ 

#t* ( 9 1 6 > . m2,m&zm*kztitzm 
2,tf&tmmx'b^fi:Wiit. zcoj&gtf. wztfimz 
tifzztz^-tumzj: *)mmzti&, m&mmzm^ 
ztitem%wmpF*jmx-h'it:i$r&. ^«oie^^\ m 

&Wtmi$ixX^%^ZbZ*-tmmz£ 01®f2$it 
h. W^^iXtzm^zMbX^m-^tz^ifilE^^j: 

^ma. m^tmtmmT^^zbi^mt i. (92 
0 ) . zcommz. tkmsmwrnT^-h (924). 
[0070] ^^ixtzm^zntx^m-ytz 
KmtpiEL^igrS. mwmtfnmmrfztitzfrb'dfr 
izmLxcomfeZ'+id (928) . ci-c. nti^mco 

a&U4k (fcfc'&If, 5)T'S>2>. nHI^$ixTV^ 
^irV^. jaa$:Xg9 0 4^ML-Ctd lSW^&SrS 
«1S^(CS^L. t£?g^^iH-|»o «H*nia*fTLfc 
5!UI£Ig9 3 2 tCit^^ . JLU9 3 2 ^ T«ia 

-r & t , s^^*>'iE l \ ^jmz ^fl^ivf^XcO^ 
ztirzg&izttLxmmitczbtfm^ (je^^L 
<^ms. wmwxm9 3 2£X'¥.t>-riz. jm9 2 

AX'WT-thZblztcZ,) . Z\co£dlzLX. m%MB 
im&X-hhZbtffct.h (932) . ZCDifr&ttZ. m 

««tiU4. mm^&-m#)%9m 1 o 6 zim-t&teu 
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6) . 

[0071] ±iico%!m<?>f8.m£. m£*jm%Ti;?>i- 
^mtc-ri ztizxKf. tewmmte. T^m^Mm 

[00723 ifti-casoyni. f^n^HsttSH 

S*LTV^v\WttHRWfcJtfflSn**ffi^. 013 
(nffitiMtzifct. 

[00 7 3] HI 3K^c$trCv^J:3t, EtaBGiJIti 
VMItMlfcfK^-iW&^^tt** (10 04). <I<9& 

jeoisi oo4ii®ia$ixrv^fv>ii«fct->"CT«i 
a. ?yyj*!)sm$:imLxftt>ti&. titta* 

i \,z-m <r>m&. ho-mmm&fcWMmzii 
hztittt. *m*7>-mfflmiz&^x. «fc3e^>i 

8 1 0 0 4{4J3lWfc«RS^flHi»set>#*f-* . la 

mz&mztuz&m^x m c.««Ri&c* 

JMl 0 0 4(CJ: "3«W)tWBawe* , iW?$n4. -ft 

[0074] ffiffiK&o i -?£<SftSft.£flL MRS*! 
fcfWB*Bg*fi«Sft.TVva:v^fWiKaSrt* (100 
8) . fcfc, WHSn-CV^vMMftt. «5*3*ifcflHB- 

(1012). jEm&nmzznd (ioi6).** 

W(c(i . *i«BK3e<0jE L » JGftPft* S J: 3 <c$r 5 . 

v**£. mmztix^%^®mtmmx'^^zbwm%. 

Ztih (10 2 0). «aEJ8ajW»7-f * 

( 1024) . 

[0075] »tKofc*Mf*qijSSiutflMe» 



3awcwur<oitoe*i¥a (1028) . i:t, nta 

*lXVv&vi4te. JOSSrXgl 0 0 4JCML-T. iol 

032 fcjitr. is 1 0 3 2&xwmi-& b . mmzti 

5rvtf§^{i. «uia<lfll 0 3 2 fcfcSfc-ftciSl 0 
2 4T*rT*-*£i:fc$r4) . dCLX. (SffiS 
*lTV^v^WfbWaB£T**C: i: ft* (103 

2) . (mztLX^^m&mmKh&zbiftmz 

ithb. tMBSmmT-Ti ( 10 3 6). 
[0076] ±SS0K9nOimt. 2~ocr>m$fflgti t ta 

mztix^%\*miiiz : fm^®%m&xi&nii*ti&z 
bx'hh* c\nmmmz^m*^mz-r& <r b k j: 

li, &m<r>mmztix\^mfficmm&£imtz>K 
[ o o 7 7 ] i/ v- k •> x r <?>wm ^^n<r>—mmm 

t^-TJHv^yfVt'i- COSun Microsystems, Inc. 
|»Java (fiftfiR) 7D/5SVmfAS 

^mfA<Mlt LTltagLW*. 01 4tc. fKfl 
<0Hi6»S* { ll^§itTV^3>-fi-^^XT-Z.l 1 

wfA noon ffi^coMfi \z®m*rh / <x 1 1 o 

2i,L<{if6«a(i«l«. ^#»W:a'x1 1 0 2tc«« 
Sil.Tfll«*«ffl-rsrPHr«yifl l'04t«t. 3> 
Ca-^^fAl 1 OOttl 5y/A7?-feX^^ 
U (RAM) i^(4fl!icoa«E^B^if<0±iBeSISi 
1 06tffl^ji*ixT*J l 9. /tti 1 Q1\zWk^tvr: 
7-n-fe-yfl 1 0 4*<HtT-ri>1f$Si:^5:^ : i¥-tS. 

±£tt£Sl 1 0 6ti. 7Dt7tl 1 0 4#f& 
4M)Hff4> tflEffl-TS -B#W5^t * fcttffi*>ittBflH*& 

fAHO Oti. a'x l l 0 2fc«R8*itrn-fe /If 
1 1 0 4*Jffiffl-r-g»#W^ffi#i:^Sr«#-rS^ai 
L*ffl>^:'J (ROM) 1 1 0 8*^{±fl!l<0»WffieSI11 
Sr-^O . m%f -<X7£ fc«3tT 4: MISSUS 

1 1 1 0(i. A'xi l0 2lZ®mZtlXimbtir&<n& 

mz&mztiz. 

[0 0 78] ayea-^yXfAl 10 OH A'XI 
1 0 2£$iEfeLTR£®t*t (CRT) 5rk^fa71/ 
-fill 2<ca»$#i« a^lf jL-^i— f-izimt: 
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■nsm. 1 1 1 4ti^'x 1 1 o 2 iztmztix. mmt n 

li#-7/Kfrfl*-&m$-V/i^fflil l 1 6**» 
0, ^|filffifat=»vyh'<oa»?5:ro-fe-y-9-l 10 4t: 
fa7i^f ill 2^*-V;KOKi§SrSiJffli-r 
£. znXJj&Ste. ilftflll'M (fcfc;Uf. x) 
21ft (tztUi. y) W2fft«02Jg<oe*SSrl#^Tfc 

[00793 -HJgJglKKftoT . *%HHO«figtt. i. 

110 6 (cffilASfife 1 & fcMttft«)*fr«> 1 
*fcJi«RO^-ir^*l8frr*ra-fe-y9-l 1 0 4 
W£tT=»ye.x-?>o*.-fAl 10 0#fW&. i 
*>J:p*#4Hi, iElgSiai l l oftwayta-^ 

1 1 o 6tcM*a**i4. ±s«sar 1 1 o 6tc^$ 
titifiiG-is—yyxZjci^ ro-t7ti i 04Ri 

to 080] id-cfflffl$ixrv^ r3vt a -^*m 

?k<m&&ht. tztt.\t. ^nmmmza. ease 
mi 1 1 o%Z(o%~r4A?ttiifimT < A?tft> 
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